{"grype_matches":[{"artifact":{"id":"1b444b376c32d748","cpes":["cpe:2.3:a:andybalholm:brotli:v1.2.0:*:*:*:*:*:*:*"],"name":"github.com/andybalholm/brotli","purl":"pkg:golang/github.com/andybalholm/brotli@v1.2.0","type":"go-module","version":"v1.2.0","language":"go","licenses":[],"metadata":{"h1Digest":"h1:ukwgCxwYrmACq68yiUqwIWnGY0cTPox/M94sVwToPjQ=","mainModule":"k6","architecture":"amd64","goCompiledVersion":"go1.26.10"},"locations":[{"path":"/usr/libexec/sm-k6/k6-v1","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/usr/libexec/sm-k6/k6-v1","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.2.7"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6888","versionConstraint":"<1.2.7 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"github.com/andybalholm/brotli","version":"v1.2.0"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6888","fix":{"state":"fixed","versions":["1.2.7"],"available":[{"date":"2026-10-23","kind":"release","version":"1.2.7"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-111497","cwe":"CWE-252","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2026-111497","cwe":"CWE-787","type":"Secondary","source":"cve-coordination@google.com"}],"epss":[{"cve":"CVE-2026-111497","date":"2026-11-07","epss":0.82641,"percentile":0.99669}],"risk":98.70000000000002,"urls":["https://github.com/andybalholm/brotli/commit/33c2a9884269798192b5ecf171288f98939dbe42","https://github.com/andybalholm/brotli/releases/tag/v1.2.7","https://github.com/google/brotli/commit/0ed4268a4401abcb4472096340477cf4af7d1a2b"],"severity":"Critical","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://github.com/andybalholm/brotli/security/advisories/GHSA-c9gr-gmg4-2vqv","description":"In github.com/andybalholm/brotli before v1.2.7, the decompressor allocates memory for Huffman tables and block-type trees on every meta-block header without bounding the cumulative allocations relative to the input size. A small crafted brotli stream containing many empty meta-blocks with new Huffman trees can trigger hundreds of megabytes of allocations per kilobyte of input, leading to denial of service.","knownExploited":[{"cve":"CVE-2026-111497","cwes":["CWE-252","CWE-787"],"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-111497"],"notes":"This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://github.com/google/brotli/releases/tag/v1.2.1; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk","dueDate":"2026-11-10","product":"Brotli","dateAdded":"2026-10-27","vendorProject":"Google","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","knownRansomwareCampaignUse":"unknown"}]},"relatedVulnerabilities":[{"id":"CVE-2026-111497","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve-coordination@google.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":9.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-111497","cwe":"CWE-252","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2026-111497","cwe":"CWE-787","type":"Secondary","source":"cve-coordination@google.com"}],"epss":[{"cve":"CVE-2026-111497","date":"2026-11-07","epss":0.82641,"percentile":0.99669}],"urls":["https://github.com/andybalholm/brotli/releases/tag/v1.2.7","https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#nodejs-brotli-decoder-out-of-bounds-write-permits-remote-code-execution-cve-2026-111497---high","http://www.openwall.com/lists/oss-security/2026/10/23/25","http://www.openwall.com/lists/oss-security/2026/10/24/6","http://www.openwall.com/lists/oss-security/2026/10/26/12","http://www.openwall.com/lists/oss-security/2026/10/26/13","http://www.openwall.com/lists/oss-security/2026/10/26/16","http://www.openwall.com/lists/oss-security/2026/11/03/2","https://broccoli2shell.com","https://github.com/advisories/GHSA-9v8h-qqgm-4m35","https://github.com/dotnet/announcements/issues/494","https://github.com/google/brotli/releases/tag/v1.0.10","https://github.com/google/brotli/releases/tag/v1.1.1","https://github.com/google/brotli/releases/tag/v1.2.1","https://lists.debian.org/debian-lts-announce/2026/10/msg00049.html","https://patchtheplanet.org/brotli","https://www.aikido.dev/blog/node2shell-nodejs-brotli-rce-cve-2026-111497","https://cert-portal.siemens.com/productcert/html/ssa-045512.html","https://cert-portal.siemens.com/productcert/html/ssa-443410.html","https://cert-portal.siemens.com/productcert/html/ssa-898633.html","https://ellio.tech/en/blog/node2shell-cve-2026-111497-rce-on-stock-nodejs-builds/","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-111497"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-111497","description":"A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.\n\n\n\n\n\nUsers need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.","knownExploited":[{"cve":"CVE-2026-111497","cwes":["CWE-252","CWE-787"],"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-111497"],"notes":"This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://github.com/google/brotli/releases/tag/v1.2.1; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk","dueDate":"2026-11-10","product":"Brotli","dateAdded":"2026-10-27","vendorProject":"Google","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","knownRansomwareCampaignUse":"unknown"}]},{"id":"GHSA-c9gr-gmg4-2vqv","cvss":[],"urls":[],"severity":"Unknown","namespace":"github:language:go","dataSource":"github"}]},{"artifact":{"id":"3bc4b7c934843c3e","cpes":["cpe:2.3:a:andybalholm:brotli:v1.2.3:*:*:*:*:*:*:*"],"name":"github.com/andybalholm/brotli","purl":"pkg:golang/github.com/andybalholm/brotli@v1.2.3","type":"go-module","version":"v1.2.3","language":"go","licenses":[],"metadata":{"h1Digest":"h1:8H1qwOkl2LPfjf3YezB90JnCliZb6SInJ/OJkEbA5NQ=","mainModule":"k6","architecture":"amd64","goCompiledVersion":"go1.26.10"},"locations":[{"path":"/usr/libexec/sm-k6/k6-v2","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/usr/libexec/sm-k6/k6-v2","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.2.7"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6888","versionConstraint":"<1.2.7 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"github.com/andybalholm/brotli","version":"v1.2.3"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6888","fix":{"state":"fixed","versions":["1.2.7"],"available":[{"date":"2026-10-23","kind":"release","version":"1.2.7"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-111497","cwe":"CWE-252","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2026-111497","cwe":"CWE-787","type":"Secondary","source":"cve-coordination@google.com"}],"epss":[{"cve":"CVE-2026-111497","date":"2026-11-07","epss":0.82641,"percentile":0.99669}],"risk":98.70000000000002,"urls":["https://github.com/andybalholm/brotli/commit/33c2a9884269798192b5ecf171288f98939dbe42","https://github.com/andybalholm/brotli/releases/tag/v1.2.7","https://github.com/google/brotli/commit/0ed4268a4401abcb4472096340477cf4af7d1a2b"],"severity":"Critical","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://github.com/andybalholm/brotli/security/advisories/GHSA-c9gr-gmg4-2vqv","description":"In github.com/andybalholm/brotli before v1.2.7, the decompressor allocates memory for Huffman tables and block-type trees on every meta-block header without bounding the cumulative allocations relative to the input size. A small crafted brotli stream containing many empty meta-blocks with new Huffman trees can trigger hundreds of megabytes of allocations per kilobyte of input, leading to denial of service.","knownExploited":[{"cve":"CVE-2026-111497","cwes":["CWE-252","CWE-787"],"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-111497"],"notes":"This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://github.com/google/brotli/releases/tag/v1.2.1; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk","dueDate":"2026-11-10","product":"Brotli","dateAdded":"2026-10-27","vendorProject":"Google","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","knownRansomwareCampaignUse":"unknown"}]},"relatedVulnerabilities":[{"id":"CVE-2026-111497","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve-coordination@google.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":9.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-111497","cwe":"CWE-252","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2026-111497","cwe":"CWE-787","type":"Secondary","source":"cve-coordination@google.com"}],"epss":[{"cve":"CVE-2026-111497","date":"2026-11-07","epss":0.82641,"percentile":0.99669}],"urls":["https://github.com/andybalholm/brotli/releases/tag/v1.2.7","https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#nodejs-brotli-decoder-out-of-bounds-write-permits-remote-code-execution-cve-2026-111497---high","http://www.openwall.com/lists/oss-security/2026/10/23/25","http://www.openwall.com/lists/oss-security/2026/10/24/6","http://www.openwall.com/lists/oss-security/2026/10/26/12","http://www.openwall.com/lists/oss-security/2026/10/26/13","http://www.openwall.com/lists/oss-security/2026/10/26/16","http://www.openwall.com/lists/oss-security/2026/11/03/2","https://broccoli2shell.com","https://github.com/advisories/GHSA-9v8h-qqgm-4m35","https://github.com/dotnet/announcements/issues/494","https://github.com/google/brotli/releases/tag/v1.0.10","https://github.com/google/brotli/releases/tag/v1.1.1","https://github.com/google/brotli/releases/tag/v1.2.1","https://lists.debian.org/debian-lts-announce/2026/10/msg00049.html","https://patchtheplanet.org/brotli","https://www.aikido.dev/blog/node2shell-nodejs-brotli-rce-cve-2026-111497","https://cert-portal.siemens.com/productcert/html/ssa-045512.html","https://cert-portal.siemens.com/productcert/html/ssa-443410.html","https://cert-portal.siemens.com/productcert/html/ssa-898633.html","https://ellio.tech/en/blog/node2shell-cve-2026-111497-rce-on-stock-nodejs-builds/","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-111497"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-111497","description":"A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.\n\n\n\n\n\nUsers need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.","knownExploited":[{"cve":"CVE-2026-111497","cwes":["CWE-252","CWE-787"],"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-111497"],"notes":"This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://github.com/google/brotli/releases/tag/v1.2.1; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk","dueDate":"2026-11-10","product":"Brotli","dateAdded":"2026-10-27","vendorProject":"Google","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","knownRansomwareCampaignUse":"unknown"}]},{"id":"GHSA-c9gr-gmg4-2vqv","cvss":[],"urls":[],"severity":"Unknown","namespace":"github:language:go","dataSource":"github"}]},{"artifact":{"id":"4e542f589dd32e50","cpes":["cpe:2.3:a:sqlite-libs:sqlite-libs:3.54.1-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite-libs:sqlite_libs:3.54.1-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite_libs:sqlite-libs:3.54.1-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite_libs:sqlite_libs:3.54.1-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite-libs:3.54.1-r0:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite_libs:3.54.1-r0:*:*:*:*:*:*:*"],"name":"sqlite-libs","purl":"pkg:apk/alpine/sqlite-libs@3.54.1-r0?arch=x86_64&distro=alpine-3.24.3&upstream=sqlite","type":"apk","version":"3.54.1-r0","language":"","licenses":["blessing"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libsqlite3.so.0"},{"path":"/usr/lib/libsqlite3.so.3.54.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"sqlite"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-119586","versionConstraint":"<= 3.54.1 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:sqlite:sqlite:3.54.1:*:*:*:*:*:*:*"],"package":{"name":"sqlite","version":"3.54.1-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-119586","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119586","cwe":"CWE-77","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119586","date":"2026-11-07","epss":0.01545,"percentile":0.75137}],"risk":1.2089625,"urls":["https://abraxaslabs.tech/research/sqlite-cli-recover","https://github.com/sqlite/sqlite","https://github.com/sqlite/sqlite/blob/version-3.54.1/ext/recover/sqlite3recover.c#L1221-L1223","https://github.com/sqlite/sqlite/blob/version-3.54.1/src/shell.c.in#L7877-L7891","https://www.vulncheck.com/advisories/sqlite-cli-through-3.54.1-command-injection-via-recover-output"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119586","description":"SQLite command-line shell through 3.54.1 contains a command injection vulnerability in the .recover command that emits attacker-planted dot-commands stored in sqlite_schema.sql values verbatim. Attackers can craft a database whose schema holds a valid CREATE statement followed by a .shell or .system line, executing OS commands when victims pipe .recover output into sqlite3."},"relatedVulnerabilities":[]},{"artifact":{"id":"feb6e072f4cd4421","cpes":["cpe:2.3:a:golang:networking:v0.58.0:*:*:*:*:go:*:*","cpe:2.3:a:golang:net:v0.58.0:*:*:*:*:go:*:*"],"name":"golang.org/x/net","purl":"pkg:golang/golang.org/x/net@v0.58.0","type":"go-module","version":"v0.58.0","language":"go","licenses":[],"metadata":{"h1Digest":"h1:ynWG7rqYi4ccpTEuPZ2QGWHktVEM9DMCj9yzDE0Q7To=","mainModule":"k6","architecture":"amd64","goCompiledVersion":"go1.26.10"},"locations":[{"path":"/usr/libexec/sm-k6/k6-v2","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/usr/libexec/sm-k6/k6-v2","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.60.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6612","versionConstraint":"<0.60.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/net","version":"v0.58.0"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6612","fix":{"state":"fixed","versions":["0.60.0"],"available":[{"date":"2026-10-08","kind":"release","version":"0.60.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78663","cwe":"CWE-675","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78663","date":"2026-11-07","epss":0.00858,"percentile":0.58678}],"risk":0.7764900000000001,"urls":["https://go.dev/cl/847310","https://go.dev/issue/81743","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs"],"severity":"Critical","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847187","description":"The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configured connection-level flow control limit (MaxReceiveBufferPerConnection). Total buffered data is still limited by the concurrent stream limit and stream-level flow control."},"relatedVulnerabilities":[{"id":"CVE-2026-78663","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78663","cwe":"CWE-675","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78663","date":"2026-11-07","epss":0.00858,"percentile":0.58678}],"urls":["https://go.dev/cl/847187","https://go.dev/cl/847310","https://go.dev/issue/81743","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6612"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78663","description":"The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configured connection-level flow control limit (MaxReceiveBufferPerConnection). Total buffered data is still limited by the concurrent stream limit and stream-level flow control."}]},{"artifact":{"id":"d690b425b757db47","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64831","versionConstraint":">= 8.0, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64831","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64831","cwe":"CWE-121","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64831","date":"2026-11-07","epss":0.00851,"percentile":0.5844}],"risk":0.6914375,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/92737390dc133daadce47dd7d2ec8ef3d9ebcbed","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23665","https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-vulkan-hevc-decoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64831","description":"FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vulkan HEVC hardware decoder that allows remote attackers to overwrite return addresses and adjacent stack frames by supplying a crafted HEVC/H.265 bitstream. Attackers can embed a malicious vps_num_hrd_parameters value exceeding HEVC_MAX_SUB_LAYERS in any supported container format to overflow stack-allocated arrays in the vk_hevc_end_frame function, potentially achieving arbitrary code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"243e974ceb6a5245","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64831","versionConstraint":">= 8.0, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64831","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64831","cwe":"CWE-121","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64831","date":"2026-11-07","epss":0.00851,"percentile":0.5844}],"risk":0.6914375,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/92737390dc133daadce47dd7d2ec8ef3d9ebcbed","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23665","https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-vulkan-hevc-decoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64831","description":"FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vulkan HEVC hardware decoder that allows remote attackers to overwrite return addresses and adjacent stack frames by supplying a crafted HEVC/H.265 bitstream. Attackers can embed a malicious vps_num_hrd_parameters value exceeding HEVC_MAX_SUB_LAYERS in any supported container format to overflow stack-allocated arrays in the vk_hevc_end_frame function, potentially achieving arbitrary code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6896ca1d5ee5394","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64831","versionConstraint":">= 8.0, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64831","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64831","cwe":"CWE-121","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64831","date":"2026-11-07","epss":0.00851,"percentile":0.5844}],"risk":0.6914375,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/92737390dc133daadce47dd7d2ec8ef3d9ebcbed","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23665","https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-vulkan-hevc-decoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64831","description":"FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vulkan HEVC hardware decoder that allows remote attackers to overwrite return addresses and adjacent stack frames by supplying a crafted HEVC/H.265 bitstream. Attackers can embed a malicious vps_num_hrd_parameters value exceeding HEVC_MAX_SUB_LAYERS in any supported container format to overflow stack-allocated arrays in the vk_hevc_end_frame function, potentially achieving arbitrary code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"1c27d303595909ee","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64831","versionConstraint":">= 8.0, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64831","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64831","cwe":"CWE-121","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64831","date":"2026-11-07","epss":0.00851,"percentile":0.5844}],"risk":0.6914375,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/92737390dc133daadce47dd7d2ec8ef3d9ebcbed","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23665","https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-vulkan-hevc-decoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64831","description":"FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vulkan HEVC hardware decoder that allows remote attackers to overwrite return addresses and adjacent stack frames by supplying a crafted HEVC/H.265 bitstream. Attackers can embed a malicious vps_num_hrd_parameters value exceeding HEVC_MAX_SUB_LAYERS in any supported container format to overflow stack-allocated arrays in the vk_hevc_end_frame function, potentially achieving arbitrary code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"feb6e072f4cd4421","cpes":["cpe:2.3:a:golang:networking:v0.58.0:*:*:*:*:go:*:*","cpe:2.3:a:golang:net:v0.58.0:*:*:*:*:go:*:*"],"name":"golang.org/x/net","purl":"pkg:golang/golang.org/x/net@v0.58.0","type":"go-module","version":"v0.58.0","language":"go","licenses":[],"metadata":{"h1Digest":"h1:ynWG7rqYi4ccpTEuPZ2QGWHktVEM9DMCj9yzDE0Q7To=","mainModule":"k6","architecture":"amd64","goCompiledVersion":"go1.26.10"},"locations":[{"path":"/usr/libexec/sm-k6/k6-v2","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/usr/libexec/sm-k6/k6-v2","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.60.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6603","versionConstraint":"<0.60.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/net","version":"v0.58.0"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6603","fix":{"state":"fixed","versions":["0.60.0"],"available":[{"date":"2026-10-08","kind":"release","version":"0.60.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78659","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78659","date":"2026-11-07","epss":0.00866,"percentile":0.58917}],"risk":0.6494999999999999,"urls":["https://go.dev/cl/847314","https://go.dev/issue/81857","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847185","description":"When \"Trailer\" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending a \"Trailer\" header that declares a large number of fields, causing the server to allocate a disproportionate amount of memory while bypassing Server.MaxHeaderValueCount and Server.MaxHeaderBytes limits. This exploit is not applicable for HTTP/1 servers, which do not support multiplexing a large number of requests over one TCP connection, and whose Server.MaxHeaderBytes are calculated differently."},"relatedVulnerabilities":[{"id":"CVE-2026-78659","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78659","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78659","date":"2026-11-07","epss":0.00866,"percentile":0.58917}],"urls":["https://go.dev/cl/847185","https://go.dev/cl/847314","https://go.dev/issue/81857","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6603"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78659","description":"When \"Trailer\" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending a \"Trailer\" header that declares a large number of fields, causing the server to allocate a disproportionate amount of memory while bypassing Server.MaxHeaderValueCount and Server.MaxHeaderBytes limits. This exploit is not applicable for HTTP/1 servers, which do not support multiplexing a large number of requests over one TCP connection, and whose Server.MaxHeaderBytes are calculated differently."}]},{"artifact":{"id":"feb6e072f4cd4421","cpes":["cpe:2.3:a:golang:networking:v0.58.0:*:*:*:*:go:*:*","cpe:2.3:a:golang:net:v0.58.0:*:*:*:*:go:*:*"],"name":"golang.org/x/net","purl":"pkg:golang/golang.org/x/net@v0.58.0","type":"go-module","version":"v0.58.0","language":"go","licenses":[],"metadata":{"h1Digest":"h1:ynWG7rqYi4ccpTEuPZ2QGWHktVEM9DMCj9yzDE0Q7To=","mainModule":"k6","architecture":"amd64","goCompiledVersion":"go1.26.10"},"locations":[{"path":"/usr/libexec/sm-k6/k6-v2","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/usr/libexec/sm-k6/k6-v2","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.60.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6611","versionConstraint":"<0.60.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/net","version":"v0.58.0"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6611","fix":{"state":"fixed","versions":["0.60.0"],"available":[{"date":"2026-10-08","kind":"release","version":"0.60.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78669","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78669","date":"2026-11-07","epss":0.00847,"percentile":0.58324}],"risk":0.6352500000000001,"urls":["https://go.dev/cl/847308","https://go.dev/issue/81742","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847186","description":"A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values."},"relatedVulnerabilities":[{"id":"CVE-2026-78669","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78669","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78669","date":"2026-11-07","epss":0.00847,"percentile":0.58324}],"urls":["https://go.dev/cl/847186","https://go.dev/cl/847308","https://go.dev/issue/81742","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6611"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78669","description":"A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values."}]},{"artifact":{"id":"d690b425b757db47","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66040","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66040","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66040","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66040","date":"2026-11-07","epss":0.00776,"percentile":0.56027}],"risk":0.6311466666666667,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66040","description":"FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability in the native PNG and APNG encoders that allows remote attackers to corrupt heap memory by supplying a crafted PNG image with a malicious eXIf chunk. Attackers can craft an eXIf chunk where multiple IFD entries reference the same large value payload, causing canonical serialization to expand the output far beyond the undersized allocation estimated by add_exif_profile_size(), resulting in png_write_chunk() writing tens of thousands of bytes past the buffer boundary, leading to deterministic heap corruption, process crash, and potentially arbitrary code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"243e974ceb6a5245","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66040","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66040","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66040","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66040","date":"2026-11-07","epss":0.00776,"percentile":0.56027}],"risk":0.6311466666666667,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66040","description":"FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability in the native PNG and APNG encoders that allows remote attackers to corrupt heap memory by supplying a crafted PNG image with a malicious eXIf chunk. Attackers can craft an eXIf chunk where multiple IFD entries reference the same large value payload, causing canonical serialization to expand the output far beyond the undersized allocation estimated by add_exif_profile_size(), resulting in png_write_chunk() writing tens of thousands of bytes past the buffer boundary, leading to deterministic heap corruption, process crash, and potentially arbitrary code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6896ca1d5ee5394","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66040","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66040","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66040","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66040","date":"2026-11-07","epss":0.00776,"percentile":0.56027}],"risk":0.6311466666666667,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66040","description":"FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability in the native PNG and APNG encoders that allows remote attackers to corrupt heap memory by supplying a crafted PNG image with a malicious eXIf chunk. Attackers can craft an eXIf chunk where multiple IFD entries reference the same large value payload, causing canonical serialization to expand the output far beyond the undersized allocation estimated by add_exif_profile_size(), resulting in png_write_chunk() writing tens of thousands of bytes past the buffer boundary, leading to deterministic heap corruption, process crash, and potentially arbitrary code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"1c27d303595909ee","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66040","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66040","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66040","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66040","date":"2026-11-07","epss":0.00776,"percentile":0.56027}],"risk":0.6311466666666667,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66040","description":"FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability in the native PNG and APNG encoders that allows remote attackers to corrupt heap memory by supplying a crafted PNG image with a malicious eXIf chunk. Attackers can craft an eXIf chunk where multiple IFD entries reference the same large value payload, causing canonical serialization to expand the output far beyond the undersized allocation estimated by add_exif_profile_size(), resulting in png_write_chunk() writing tens of thousands of bytes past the buffer boundary, leading to deterministic heap corruption, process crash, and potentially arbitrary code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"d690b425b757db47","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64834","versionConstraint":">= 0.6.3, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64834","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64834","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64834","date":"2026-11-07","epss":0.00727,"percentile":0.5439}],"risk":0.56706,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663","https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64834","description":"FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxer within libavformat/rtpdec_asf.c that allows remote attackers to cause denial of service by sending a crafted RTP/ASF stream. The rtp_asf_fix_header function fails to validate a minimum chunksize when iterating over ASF objects, causing the loop pointer to never advance when a chunksize is smaller than the 24-byte minimum ASF object header size, resulting in CPU exhaustion that denies service to legitimate users."},"relatedVulnerabilities":[]},{"artifact":{"id":"243e974ceb6a5245","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64834","versionConstraint":">= 0.6.3, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64834","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64834","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64834","date":"2026-11-07","epss":0.00727,"percentile":0.5439}],"risk":0.56706,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663","https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64834","description":"FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxer within libavformat/rtpdec_asf.c that allows remote attackers to cause denial of service by sending a crafted RTP/ASF stream. The rtp_asf_fix_header function fails to validate a minimum chunksize when iterating over ASF objects, causing the loop pointer to never advance when a chunksize is smaller than the 24-byte minimum ASF object header size, resulting in CPU exhaustion that denies service to legitimate users."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6896ca1d5ee5394","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64834","versionConstraint":">= 0.6.3, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64834","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64834","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64834","date":"2026-11-07","epss":0.00727,"percentile":0.5439}],"risk":0.56706,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663","https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64834","description":"FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxer within libavformat/rtpdec_asf.c that allows remote attackers to cause denial of service by sending a crafted RTP/ASF stream. The rtp_asf_fix_header function fails to validate a minimum chunksize when iterating over ASF objects, causing the loop pointer to never advance when a chunksize is smaller than the 24-byte minimum ASF object header size, resulting in CPU exhaustion that denies service to legitimate users."},"relatedVulnerabilities":[]},{"artifact":{"id":"1c27d303595909ee","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64834","versionConstraint":">= 0.6.3, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64834","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64834","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64834","date":"2026-11-07","epss":0.00727,"percentile":0.5439}],"risk":0.56706,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663","https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64834","description":"FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxer within libavformat/rtpdec_asf.c that allows remote attackers to cause denial of service by sending a crafted RTP/ASF stream. The rtp_asf_fix_header function fails to validate a minimum chunksize when iterating over ASF objects, causing the loop pointer to never advance when a chunksize is smaller than the 24-byte minimum ASF object header size, resulting in CPU exhaustion that denies service to legitimate users."},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113303","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113303","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113303","cwe":"CWE-416","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113303","date":"2026-11-07","epss":0.00672,"percentile":0.52318}],"risk":0.5476800000000001,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/574041825"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113303","description":"Use after free in WebRTC in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"},"relatedVulnerabilities":[]},{"artifact":{"id":"5072120da1bad992","cpes":["cpe:2.3:a:DaveGamble:cjson:1.7.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cjson:cjson:1.7.19-r1:*:*:*:*:*:*:*"],"name":"cjson","purl":"pkg:apk/alpine/cjson@1.7.19-r1?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"1.7.19-r1","language":"","licenses":["MIT"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcjson.so.1"},{"path":"/usr/lib/libcjson.so.1.7.19"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"cjson"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:davegamble:cjson:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-67215","versionConstraint":"<= 1.7.19 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:DaveGamble:cjson:1.7.19:*:*:*:*:*:*:*"],"package":{"name":"cjson","version":"1.7.19-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-67215","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-67215","cwe":"CWE-674","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-67215","date":"2026-11-07","epss":0.007,"percentile":0.534}],"risk":0.546,"urls":["https://github.com/DaveGamble/cJSON/blob/v1.7.19/cJSON.c#L253-L261","https://github.com/DaveGamble/cJSON/blob/v1.7.19/cJSON_Utils.c#L906-L940","https://joshua.hu/cjson-json-parser-cve-vulnerabilities","https://www.vulncheck.com/advisories/cjson-json-patch-copy-add-uncontrolled-recursion-stack-exhaustion"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-67215","description":"cJSON through 1.7.19 is vulnerable to uncontrolled recursion leading to stack exhaustion when an untrusted RFC 6902 JSON Patch is applied via cJSONUtils_ApplyPatches() or cJSONUtils_ApplyPatchesCaseSensitive(). A patch containing add and copy operations grafts duplicated subtrees to amplify document depth beyond the parser's nesting limit: cJSON_Delete() recurses with no depth bound, and the cJSON_Duplicate() guard CJSON_CIRCULAR_LIMIT is set to 10000, ten times the parser's 1000-level nesting limit and high enough to overflow a default thread stack. An attacker who can supply the patch document can crash the process, resulting in denial of service."},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2015-1239","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2015-1239","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2015-1239","cwe":"CWE-415","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-1239","date":"2026-11-07","epss":0.01038,"percentile":0.64144}],"risk":0.53976,"urls":["https://bugs.chromium.org/p/chromium/issues/detail?id=430891","https://bugs.chromium.org/p/chromium/issues/detail?id=457493","https://lists.debian.org/debian-lts-announce/2018/07/msg00025.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2015-1239","description":"Double free vulnerability in the j2k_read_ppm_v3 function in OpenJPEG before r2997, as used in PDFium in Google Chrome, allows remote attackers to cause a denial of service (process crash) via a crafted PDF."},"relatedVulnerabilities":[]},{"artifact":{"id":"d690b425b757db47","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64830","versionConstraint":">= 2.1, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64830","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64830","cwe":"CWE-122","type":"Primary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64830","date":"2026-11-07","epss":0.00646,"percentile":0.51216}],"risk":0.524875,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657","https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64830","description":"FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjacent heap memory by supplying a malicious .sub/.idx subtitle file declaring more distinct stream IDs than the fixed-size array bounds in libavformat/mpeg.c. Attackers can craft a subtitle file with excessive distinct stream IDs to trigger unbounded writes beyond the vobsub->q[] array boundary via ff_subtitles_queue_insert(), potentially achieving arbitrary code execution in any application using FFmpeg's VobSub demuxer."},"relatedVulnerabilities":[]},{"artifact":{"id":"243e974ceb6a5245","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64830","versionConstraint":">= 2.1, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64830","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64830","cwe":"CWE-122","type":"Primary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64830","date":"2026-11-07","epss":0.00646,"percentile":0.51216}],"risk":0.524875,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657","https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64830","description":"FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjacent heap memory by supplying a malicious .sub/.idx subtitle file declaring more distinct stream IDs than the fixed-size array bounds in libavformat/mpeg.c. Attackers can craft a subtitle file with excessive distinct stream IDs to trigger unbounded writes beyond the vobsub->q[] array boundary via ff_subtitles_queue_insert(), potentially achieving arbitrary code execution in any application using FFmpeg's VobSub demuxer."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6896ca1d5ee5394","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64830","versionConstraint":">= 2.1, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64830","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64830","cwe":"CWE-122","type":"Primary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64830","date":"2026-11-07","epss":0.00646,"percentile":0.51216}],"risk":0.524875,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657","https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64830","description":"FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjacent heap memory by supplying a malicious .sub/.idx subtitle file declaring more distinct stream IDs than the fixed-size array bounds in libavformat/mpeg.c. Attackers can craft a subtitle file with excessive distinct stream IDs to trigger unbounded writes beyond the vobsub->q[] array boundary via ff_subtitles_queue_insert(), potentially achieving arbitrary code execution in any application using FFmpeg's VobSub demuxer."},"relatedVulnerabilities":[]},{"artifact":{"id":"1c27d303595909ee","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64830","versionConstraint":">= 2.1, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64830","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64830","cwe":"CWE-122","type":"Primary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64830","date":"2026-11-07","epss":0.00646,"percentile":0.51216}],"risk":0.524875,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657","https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64830","description":"FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjacent heap memory by supplying a malicious .sub/.idx subtitle file declaring more distinct stream IDs than the fixed-size array bounds in libavformat/mpeg.c. Attackers can craft a subtitle file with excessive distinct stream IDs to trigger unbounded writes beyond the vobsub->q[] array boundary via ff_subtitles_queue_insert(), potentially achieving arbitrary code execution in any application using FFmpeg's VobSub demuxer."},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113072","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113072","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113072","cwe":"CWE-416","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113072","date":"2026-11-07","epss":0.00559,"percentile":0.46777}],"risk":0.5198699999999999,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/570638836"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113072","description":"Use after free in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"},"relatedVulnerabilities":[]},{"artifact":{"id":"feb6e072f4cd4421","cpes":["cpe:2.3:a:golang:networking:v0.58.0:*:*:*:*:go:*:*","cpe:2.3:a:golang:net:v0.58.0:*:*:*:*:go:*:*"],"name":"golang.org/x/net","purl":"pkg:golang/golang.org/x/net@v0.58.0","type":"go-module","version":"v0.58.0","language":"go","licenses":[],"metadata":{"h1Digest":"h1:ynWG7rqYi4ccpTEuPZ2QGWHktVEM9DMCj9yzDE0Q7To=","mainModule":"k6","architecture":"amd64","goCompiledVersion":"go1.26.10"},"locations":[{"path":"/usr/libexec/sm-k6/k6-v2","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/usr/libexec/sm-k6/k6-v2","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.60.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6617","versionConstraint":"<0.60.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/net","version":"v0.58.0"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6617","fix":{"state":"fixed","versions":["0.60.0"],"available":[{"date":"2026-10-08","kind":"release","version":"0.60.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-97032","cwe":"CWE-362","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-97032","date":"2026-11-07","epss":0.00676,"percentile":0.52481}],"risk":0.507,"urls":["https://go.dev/cl/847313","https://go.dev/issue/81867","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847188","description":"HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the other modifies the encoder's table size when handling a SETTINGS frame containing SETTINGS_HEADER_TABLE_SIZE that a client sends. A malicious client can repeatedly send a request while changing the header table size to crash the server."},"relatedVulnerabilities":[{"id":"CVE-2026-97032","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-97032","cwe":"CWE-362","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-97032","date":"2026-11-07","epss":0.00676,"percentile":0.52481}],"urls":["https://go.dev/cl/847188","https://go.dev/cl/847313","https://go.dev/issue/81867","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6617"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-97032","description":"HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the other modifies the encoder's table size when handling a SETTINGS frame containing SETTINGS_HEADER_TABLE_SIZE that a client sends. A malicious client can repeatedly send a request while changing the header table size to crash the server."}]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113027","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113027","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113027","cwe":"CWE-843","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113027","date":"2026-11-07","epss":0.00611,"percentile":0.49536}],"risk":0.49796500000000005,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/505807063"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113027","description":"Type confusion in WebFonts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"5072120da1bad992","cpes":["cpe:2.3:a:DaveGamble:cjson:1.7.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cjson:cjson:1.7.19-r1:*:*:*:*:*:*:*"],"name":"cjson","purl":"pkg:apk/alpine/cjson@1.7.19-r1?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"1.7.19-r1","language":"","licenses":["MIT"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcjson.so.1"},{"path":"/usr/lib/libcjson.so.1.7.19"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"cjson"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:davegamble:cjson:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-67216","versionConstraint":"<= 1.7.19 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:DaveGamble:cjson:1.7.19:*:*:*:*:*:*:*"],"package":{"name":"cjson","version":"1.7.19-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-67216","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-67216","cwe":"CWE-407","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-67216","date":"2026-11-07","epss":0.00645,"percentile":0.51195}],"risk":0.474075,"urls":["https://github.com/DaveGamble/cJSON/blob/v1.7.19/cJSON.c#L3057-L3180","https://joshua.hu/cjson-json-parser-cve-vulnerabilities","https://www.vulncheck.com/advisories/cjson-cjson-compare-exponential-complexity-denial-of-service"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-67216","description":"cJSON through 1.7.19 contains an inefficient algorithmic complexity flaw in cJSON_Compare(). When comparing objects, the function recurses into each shared subtree twice, once in each direction, with no depth guard, making the running time exponential in nesting depth. A small, deeply nested document of a few hundred bytes (depth around 40) compared for equality consumes hours of CPU, and the cost roughly doubles with each additional level of nesting. An application that calls cJSON_Compare() on attacker-influenced JSON that is structurally equal to a reference document is exposed to a denial-of-service condition."},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113163","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113163","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113163","cwe":"CWE-122","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113163","date":"2026-11-07","epss":0.00579,"percentile":0.47873}],"risk":0.471885,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/548066294"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113163","description":"Buffer overflow in WebGL in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113020","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113020","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113020","cwe":"CWE-416","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113020","date":"2026-11-07","epss":0.00495,"percentile":0.42709}],"risk":0.46035,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/565838017"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113020","description":"Use after free in Date in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113336","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113336","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113336","cwe":"CWE-416","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113336","date":"2026-11-07","epss":0.00495,"percentile":0.42709}],"risk":0.46035,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/569286604"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113336","description":"Use after free in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113161","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113161","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113161","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113161","date":"2026-11-07","epss":0.0056,"percentile":0.46867}],"risk":0.45640000000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/568945639"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113161","description":"Use after free in WebRTC in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121156","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121156","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121156","cwe":"CWE-122","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121156","date":"2026-11-07","epss":0.00482,"percentile":0.41803}],"risk":0.44826,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/567735302"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121156","description":"Buffer overflow in Dawn in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113043","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113043","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113043","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113043","date":"2026-11-07","epss":0.00548,"percentile":0.46133}],"risk":0.44662,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/521978171"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113043","description":"Use after free in iOSWeb in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113147","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113147","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113147","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113147","date":"2026-11-07","epss":0.00514,"percentile":0.44011}],"risk":0.41891,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/501531546"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113147","description":"Improper input validation in WebShare in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121249","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121249","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121249","cwe":"CWE-121","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121249","date":"2026-11-07","epss":0.00449,"percentile":0.39276}],"risk":0.41757,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/574752676"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121249","description":"Buffer overflow in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121086","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121086","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121086","cwe":"CWE-122","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121086","date":"2026-11-07","epss":0.00449,"percentile":0.39275}],"risk":0.41757,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/569674218"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121086","description":"Buffer overflow in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121247","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121247","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121247","cwe":"CWE-122","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121247","date":"2026-11-07","epss":0.00449,"percentile":0.39275}],"risk":0.41757,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/569161611"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121247","description":"Buffer overflow in Dawn in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113271","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113271","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113271","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113271","date":"2026-11-07","epss":0.0051,"percentile":0.4379}],"risk":0.4156500000000001,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/571618833"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113271","description":"Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113279","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113279","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113279","cwe":"CWE-416","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113279","date":"2026-11-07","epss":0.0051,"percentile":0.4379}],"risk":0.4156500000000001,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/570093145"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113279","description":"Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113280","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113280","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113280","cwe":"CWE-416","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113280","date":"2026-11-07","epss":0.0051,"percentile":0.4379}],"risk":0.4156500000000001,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/570740320"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113280","description":"Use after free in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121035","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121035","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121035","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121035","date":"2026-11-07","epss":0.00443,"percentile":0.38762}],"risk":0.4119899999999999,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/567216197"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121035","description":"Use after free in Prerender in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"},"relatedVulnerabilities":[]},{"artifact":{"id":"feb6e072f4cd4421","cpes":["cpe:2.3:a:golang:networking:v0.58.0:*:*:*:*:go:*:*","cpe:2.3:a:golang:net:v0.58.0:*:*:*:*:go:*:*"],"name":"golang.org/x/net","purl":"pkg:golang/golang.org/x/net@v0.58.0","type":"go-module","version":"v0.58.0","language":"go","licenses":[],"metadata":{"h1Digest":"h1:ynWG7rqYi4ccpTEuPZ2QGWHktVEM9DMCj9yzDE0Q7To=","mainModule":"k6","architecture":"amd64","goCompiledVersion":"go1.26.10"},"locations":[{"path":"/usr/libexec/sm-k6/k6-v2","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/usr/libexec/sm-k6/k6-v2","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.60.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6610","versionConstraint":"<0.60.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/net","version":"v0.58.0"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6610","fix":{"state":"fixed","versions":["0.60.0"],"available":[{"date":"2026-10-08","kind":"release","version":"0.60.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78660","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78660","date":"2026-11-07","epss":0.00542,"percentile":0.45813}],"risk":0.40650000000000003,"urls":["https://go.dev/cl/836385","https://go.dev/issue/81115","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/835145","description":"Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a reverse proxy. If the HTTP/1 client also does not behave strictly enough, this can result in response smuggling."},"relatedVulnerabilities":[{"id":"CVE-2026-78660","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78660","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78660","date":"2026-11-07","epss":0.00542,"percentile":0.45813}],"urls":["https://go.dev/cl/835145","https://go.dev/cl/836385","https://go.dev/issue/81115","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6610"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78660","description":"Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a reverse proxy. If the HTTP/1 client also does not behave strictly enough, this can result in response smuggling."}]},{"artifact":{"id":"d690b425b757db47","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64835","versionConstraint":">= 4.4, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64835","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64835","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64835","date":"2026-11-07","epss":0.00496,"percentile":0.42781}],"risk":0.40299999999999997,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64835","description":"FFmpeg versions 4.4 through 8.1.2 contain an out-of-bounds memory access vulnerability in the ADX audio decoder within libavcodec/adxdec.c that allows attackers to trigger both out-of-bounds reads and writes by supplying a crafted ADX or AAX audio file with a mid-stream channel layout change. When AV_PKT_DATA_NEW_EXTRADATA side data is received mid-stream, the adx_decode_frame function re-parses the stream header but fails to update the internal channel state, causing subsequent decoding operations to access the prev[] state array using a stale channel count."},"relatedVulnerabilities":[]},{"artifact":{"id":"243e974ceb6a5245","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64835","versionConstraint":">= 4.4, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64835","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64835","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64835","date":"2026-11-07","epss":0.00496,"percentile":0.42781}],"risk":0.40299999999999997,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64835","description":"FFmpeg versions 4.4 through 8.1.2 contain an out-of-bounds memory access vulnerability in the ADX audio decoder within libavcodec/adxdec.c that allows attackers to trigger both out-of-bounds reads and writes by supplying a crafted ADX or AAX audio file with a mid-stream channel layout change. When AV_PKT_DATA_NEW_EXTRADATA side data is received mid-stream, the adx_decode_frame function re-parses the stream header but fails to update the internal channel state, causing subsequent decoding operations to access the prev[] state array using a stale channel count."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6896ca1d5ee5394","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64835","versionConstraint":">= 4.4, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64835","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64835","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64835","date":"2026-11-07","epss":0.00496,"percentile":0.42781}],"risk":0.40299999999999997,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64835","description":"FFmpeg versions 4.4 through 8.1.2 contain an out-of-bounds memory access vulnerability in the ADX audio decoder within libavcodec/adxdec.c that allows attackers to trigger both out-of-bounds reads and writes by supplying a crafted ADX or AAX audio file with a mid-stream channel layout change. When AV_PKT_DATA_NEW_EXTRADATA side data is received mid-stream, the adx_decode_frame function re-parses the stream header but fails to update the internal channel state, causing subsequent decoding operations to access the prev[] state array using a stale channel count."},"relatedVulnerabilities":[]},{"artifact":{"id":"1c27d303595909ee","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64835","versionConstraint":">= 4.4, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64835","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64835","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64835","date":"2026-11-07","epss":0.00496,"percentile":0.42781}],"risk":0.40299999999999997,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64835","description":"FFmpeg versions 4.4 through 8.1.2 contain an out-of-bounds memory access vulnerability in the ADX audio decoder within libavcodec/adxdec.c that allows attackers to trigger both out-of-bounds reads and writes by supplying a crafted ADX or AAX audio file with a mid-stream channel layout change. When AV_PKT_DATA_NEW_EXTRADATA side data is received mid-stream, the adx_decode_frame function re-parses the stream header but fails to update the internal channel state, causing subsequent decoding operations to access the prev[] state array using a stale channel count."},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113012","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113012","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113012","cwe":"CWE-459","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113012","date":"2026-11-07","epss":0.00483,"percentile":0.41895}],"risk":0.393645,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/568215670"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113012","description":"Incomplete cleanup in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113030","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113030","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113030","cwe":"CWE-457","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113030","date":"2026-11-07","epss":0.00483,"percentile":0.41895}],"risk":0.393645,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/561660149"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113030","description":"Use of uninitialized variable in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113192","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113192","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113192","cwe":"CWE-843","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113192","date":"2026-11-07","epss":0.00483,"percentile":0.41895}],"risk":0.393645,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/568831099"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113192","description":"Type confusion in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-120931","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-120931","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120931","cwe":"CWE-787","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-120931","date":"2026-11-07","epss":0.0042,"percentile":0.36615}],"risk":0.39059999999999995,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/550607402"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120931","description":"Out of bounds write in WebGL in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121114","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121114","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121114","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121114","date":"2026-11-07","epss":0.00413,"percentile":0.35834}],"risk":0.38408999999999993,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/573387527"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121114","description":"Use after free in TabStrip in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121185","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121185","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121185","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121185","date":"2026-11-07","epss":0.00413,"percentile":0.35783}],"risk":0.38408999999999993,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/565681453"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121185","description":"Use after free in PictureInPicture in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121189","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121189","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121189","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121189","date":"2026-11-07","epss":0.00413,"percentile":0.35783}],"risk":0.38408999999999993,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/555547989"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121189","description":"Use after free in Browser in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121214","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121214","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121214","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121214","date":"2026-11-07","epss":0.00413,"percentile":0.35783}],"risk":0.38408999999999993,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/574412369"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121214","description":"Use after free in Passwords in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121229","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121229","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121229","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121229","date":"2026-11-07","epss":0.00413,"percentile":0.35783}],"risk":0.38408999999999993,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/562777838"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121229","description":"Memory corruption in ANGLE in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121074","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121074","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121074","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121074","date":"2026-11-07","epss":0.00413,"percentile":0.35782}],"risk":0.38408999999999993,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/536617330"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121074","description":"Memory corruption in GPU in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121089","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121089","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121089","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121089","date":"2026-11-07","epss":0.00413,"percentile":0.35782}],"risk":0.38408999999999993,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/571648522"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121089","description":"Use after free in WebGPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121126","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121126","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121126","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121126","date":"2026-11-07","epss":0.00413,"percentile":0.35782}],"risk":0.38408999999999993,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/571284308"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121126","description":"Use after free in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121148","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121148","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121148","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121148","date":"2026-11-07","epss":0.00413,"percentile":0.35782}],"risk":0.38408999999999993,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/571059182"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121148","description":"Use after free in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121246","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121246","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121246","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121246","date":"2026-11-07","epss":0.00413,"percentile":0.35781}],"risk":0.38408999999999993,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/558870371"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121246","description":"Use after free in WebGL in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113037","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113037","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113037","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113037","date":"2026-11-07","epss":0.00471,"percentile":0.40998}],"risk":0.383865,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/560939312"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113037","description":"Use after free in WebSockets in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121127","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121127","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121127","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121127","date":"2026-11-07","epss":0.00467,"percentile":0.40702}],"risk":0.380605,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/573836121"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121127","description":"Use after free in WebAudio in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121129","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121129","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121129","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121129","date":"2026-11-07","epss":0.00467,"percentile":0.40702}],"risk":0.380605,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/577403757"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121129","description":"Use after free in WebRTC in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113273","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113273","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113273","cwe":"CWE-122","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113273","date":"2026-11-07","epss":0.00467,"percentile":0.40652}],"risk":0.380605,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/561999377"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113273","description":"Buffer overflow in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"d690b425b757db47","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66041","versionConstraint":">= 7.0, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66041","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66041","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66041","date":"2026-11-07","epss":0.00487,"percentile":0.42218}],"risk":0.37986000000000003,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66041","description":"FFmpeg 7.0 through 8.1.2, fixed in commit 4da9812, contains a heap out-of-bounds write vulnerability in the vf_quirc filter that allows an attacker to corrupt heap memory by supplying a crafted PGS/SUP subtitle file with mismatched frame dimensions. Attackers can provide a subtitle file whose second presentation has larger dimensions than its first, causing av_image_copy_plane() to copy data exceeding the initial allocation size into the undersized libquirc grayscale image buffer, resulting in heap corruption and process crash with potential for code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"243e974ceb6a5245","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66041","versionConstraint":">= 7.0, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66041","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66041","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66041","date":"2026-11-07","epss":0.00487,"percentile":0.42218}],"risk":0.37986000000000003,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66041","description":"FFmpeg 7.0 through 8.1.2, fixed in commit 4da9812, contains a heap out-of-bounds write vulnerability in the vf_quirc filter that allows an attacker to corrupt heap memory by supplying a crafted PGS/SUP subtitle file with mismatched frame dimensions. Attackers can provide a subtitle file whose second presentation has larger dimensions than its first, causing av_image_copy_plane() to copy data exceeding the initial allocation size into the undersized libquirc grayscale image buffer, resulting in heap corruption and process crash with potential for code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6896ca1d5ee5394","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66041","versionConstraint":">= 7.0, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66041","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66041","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66041","date":"2026-11-07","epss":0.00487,"percentile":0.42218}],"risk":0.37986000000000003,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66041","description":"FFmpeg 7.0 through 8.1.2, fixed in commit 4da9812, contains a heap out-of-bounds write vulnerability in the vf_quirc filter that allows an attacker to corrupt heap memory by supplying a crafted PGS/SUP subtitle file with mismatched frame dimensions. Attackers can provide a subtitle file whose second presentation has larger dimensions than its first, causing av_image_copy_plane() to copy data exceeding the initial allocation size into the undersized libquirc grayscale image buffer, resulting in heap corruption and process crash with potential for code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"1c27d303595909ee","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66041","versionConstraint":">= 7.0, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66041","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66041","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66041","date":"2026-11-07","epss":0.00487,"percentile":0.42218}],"risk":0.37986000000000003,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66041","description":"FFmpeg 7.0 through 8.1.2, fixed in commit 4da9812, contains a heap out-of-bounds write vulnerability in the vf_quirc filter that allows an attacker to corrupt heap memory by supplying a crafted PGS/SUP subtitle file with mismatched frame dimensions. Attackers can provide a subtitle file whose second presentation has larger dimensions than its first, causing av_image_copy_plane() to copy data exceeding the initial allocation size into the undersized libquirc grayscale image buffer, resulting in heap corruption and process crash with potential for code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121030","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121030","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121030","cwe":"CWE-863","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121030","date":"2026-11-07","epss":0.00407,"percentile":0.35262}],"risk":0.37850999999999996,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/553152519"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121030","description":"Incorrect authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121060","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121060","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121060","cwe":"CWE-863","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121060","date":"2026-11-07","epss":0.00407,"percentile":0.35262}],"risk":0.37850999999999996,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/578500839"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121060","description":"Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113034","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113034","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113034","cwe":"CWE-706","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113034","date":"2026-11-07","epss":0.00463,"percentile":0.40322}],"risk":0.377345,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/497482008"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113034","description":"Incorrect reference resolution in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-118305","versionConstraint":"< 156.0.8078.73 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-118305","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118305","cwe":"CWE-843","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-118305","date":"2026-11-07","epss":0.00402,"percentile":0.34699}],"risk":0.37385999999999997,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html","https://issues.chromium.org/issues/568348290"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-118305","description":"Type confusion in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113168","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113168","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113168","cwe":"CWE-459","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113168","date":"2026-11-07","epss":0.00458,"percentile":0.39963}],"risk":0.37327000000000005,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/497593347"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113168","description":"Incomplete cleanup in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113044","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113044","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113044","cwe":"CWE-843","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113044","date":"2026-11-07","epss":0.00455,"percentile":0.39713}],"risk":0.37082500000000007,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/559266116"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113044","description":"Type confusion in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"71d5b1bc967e2a74","cpes":["cpe:2.3:a:libexpat:libexpat:2.9.0-r0:*:*:*:*:*:*:*"],"name":"libexpat","purl":"pkg:apk/alpine/libexpat@2.9.0-r0?arch=x86_64&distro=alpine-3.24.3&upstream=expat","type":"apk","version":"2.9.0-r0","language":"","licenses":["MIT"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libexpat.so.1"},{"path":"/usr/lib/libexpat.so.1.13.0"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"expat"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.10.0-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-113351","versionConstraint":"< 2.10.0-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"expat","version":"2.9.0-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-113351","fix":{"state":"fixed","versions":["2.10.0-r0"],"available":[{"date":"2026-11-03","kind":"first-observed","version":"2.10.0-r0"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113351","cwe":"CWE-909","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-113351","date":"2026-11-07","epss":0.00494,"percentile":0.42653}],"risk":0.3705,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-113351"},"relatedVulnerabilities":[{"id":"CVE-2026-113351","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113351","cwe":"CWE-909","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-113351","date":"2026-11-07","epss":0.00494,"percentile":0.42653}],"urls":["https://github.com/libexpat/libexpat","https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L1560","https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L860-L884","https://github.com/libexpat/libexpat/pull/1431","https://www.vulncheck.com/advisories/libexpat-2.7.2-through-2.9.0-denial-of-service-via-xml-parserreset"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113351","description":"libexpat 2.7.2 through 2.9.0 contains a denial of service vulnerability because XML_ParserReset zeroes the direct byte count but never offsets tracked heap allocations. Attackers can submit a large XML document so later documents on the same reset parser fail with XML_ERROR_NO_MEMORY until it is recreated."}]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121071","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121071","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121071","cwe":"CWE-863","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121071","date":"2026-11-07","epss":0.00397,"percentile":0.34198}],"risk":0.3692099999999999,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/561994040"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121071","description":"Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"71d5b1bc967e2a74","cpes":["cpe:2.3:a:libexpat:libexpat:2.9.0-r0:*:*:*:*:*:*:*"],"name":"libexpat","purl":"pkg:apk/alpine/libexpat@2.9.0-r0?arch=x86_64&distro=alpine-3.24.3&upstream=expat","type":"apk","version":"2.9.0-r0","language":"","licenses":["MIT"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libexpat.so.1"},{"path":"/usr/lib/libexpat.so.1.13.0"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"expat"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.10.0-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-115506","versionConstraint":"< 2.10.0-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"expat","version":"2.9.0-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-115506","fix":{"state":"fixed","versions":["2.10.0-r0"],"available":[{"date":"2026-11-03","kind":"first-observed","version":"2.10.0-r0"}]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-115506","cwe":"CWE-776","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-115506","date":"2026-11-07","epss":0.00448,"percentile":0.39184}],"risk":0.3628799999999999,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-115506"},"relatedVulnerabilities":[{"id":"CVE-2026-115506","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-115506","cwe":"CWE-776","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-115506","date":"2026-11-07","epss":0.00448,"percentile":0.39184}],"urls":["https://github.com/hannob/lololol","https://github.com/libexpat/libexpat","https://github.com/libexpat/libexpat/issues/1160","https://github.com/libexpat/libexpat/pull/1433","https://www.vulncheck.com/advisories/libexpat-through-2.9.0-denial-of-service-via-billion-laughs-detection-delay"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-115506","description":"libexpat through 2.9.0 contains a denial of service vulnerability because billion laughs protection in accountingDiffTolerated() in xmlparse.c detects entity amplification too late. Attackers can supply a moderately sized XML document with a large DTD and nested entity expansions to consume tens of seconds of CPU per parse."}]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113160","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113160","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113160","cwe":"CWE-787","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113160","date":"2026-11-07","epss":0.00443,"percentile":0.38756}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/570203091"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113160","description":"Out of bounds write in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113162","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113162","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113162","cwe":"CWE-416","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113162","date":"2026-11-07","epss":0.00443,"percentile":0.38755}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/513147880"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113162","description":"Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113181","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113181","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113181","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113181","date":"2026-11-07","epss":0.00443,"percentile":0.38755}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/569408568"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113181","description":"Use after free in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113236","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113236","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113236","cwe":"CWE-20","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113236","date":"2026-11-07","epss":0.00443,"percentile":0.38755}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553119084"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113236","description":"Improper input validation in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113248","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113248","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113248","cwe":"CWE-416","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113248","date":"2026-11-07","epss":0.00443,"percentile":0.38755}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/554560940"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113248","description":"Use after free in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113017","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113017","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113017","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113017","date":"2026-11-07","epss":0.00443,"percentile":0.38754}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553132165"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113017","description":"Use after free in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113019","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113019","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113019","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113019","date":"2026-11-07","epss":0.00443,"percentile":0.38754}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/570003644"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113019","description":"Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113165","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113165","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113165","cwe":"CWE-841","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113165","date":"2026-11-07","epss":0.00443,"percentile":0.38754}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553163770"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113165","description":"Inappropriate implementation in Core in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113318","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113318","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113318","cwe":"CWE-416","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113318","date":"2026-11-07","epss":0.00443,"percentile":0.38754}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/566136673"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113318","description":"Use after free in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113305","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113305","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113305","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113305","date":"2026-11-07","epss":0.00443,"percentile":0.38753}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/558464760"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113305","description":"Use after free in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113316","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113316","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113316","cwe":"CWE-416","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113316","date":"2026-11-07","epss":0.00443,"percentile":0.38753}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553140050"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113316","description":"Use after free in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113317","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113317","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113317","cwe":"CWE-416","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113317","date":"2026-11-07","epss":0.00443,"percentile":0.38753}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/555337558"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113317","description":"Use after free in Accessibility in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113339","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113339","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113339","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113339","date":"2026-11-07","epss":0.00443,"percentile":0.38753}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/572862424"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113339","description":"Use after free in SVG in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113337","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113337","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113337","cwe":"CWE-416","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113337","date":"2026-11-07","epss":0.00443,"percentile":0.38752}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/501680084"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113337","description":"Use after free in Scroll in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113338","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113338","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113338","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113338","date":"2026-11-07","epss":0.00443,"percentile":0.38752}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/567175125"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113338","description":"Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121057","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121057","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121057","cwe":"CWE-843","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121057","date":"2026-11-07","epss":0.00442,"percentile":0.38676}],"risk":0.36023000000000005,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/574038247"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121057","description":"Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121131","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121131","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121131","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121131","date":"2026-11-07","epss":0.00381,"percentile":0.32309}],"risk":0.35433,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/570026889"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121131","description":"Use after free in Mobile in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113217","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113217","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113217","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113217","date":"2026-11-07","epss":0.00432,"percentile":0.37728}],"risk":0.35208,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/568900845"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113217","description":"Use after free in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a co-installed app. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113108","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113108","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113108","cwe":"CWE-221","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113108","date":"2026-11-07","epss":0.00431,"percentile":0.37629}],"risk":0.351265,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/502299325"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113108","description":"Information loss in Script in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113101","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113101","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113101","cwe":"CWE-863","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113101","date":"2026-11-07","epss":0.00431,"percentile":0.37595}],"risk":0.351265,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/560749221"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113101","description":"Incorrect authorization in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113250","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113250","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113250","cwe":"CWE-190","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113250","date":"2026-11-07","epss":0.00427,"percentile":0.37169}],"risk":0.34800500000000006,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/490808751"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113250","description":"Integer overflow in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113240","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113240","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113240","cwe":"CWE-862","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113240","date":"2026-11-07","epss":0.00427,"percentile":0.37156}],"risk":0.34800500000000006,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/497577345"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113240","description":"Missing authorization in Chromecast in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113319","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113319","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113319","cwe":"CWE-862","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113319","date":"2026-11-07","epss":0.00427,"percentile":0.37156}],"risk":0.34800500000000006,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/502689637"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113319","description":"Missing authorization in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113328","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113328","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113328","cwe":"CWE-668","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113328","date":"2026-11-07","epss":0.00373,"percentile":0.31436}],"risk":0.34689,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/518055862"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113328","description":"Improper resource exposure in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113257","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113257","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113257","cwe":"CWE-416","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113257","date":"2026-11-07","epss":0.00425,"percentile":0.37064}],"risk":0.34637500000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/498994634"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113257","description":"Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113284","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113284","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113284","cwe":"CWE-416","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113284","date":"2026-11-07","epss":0.00425,"percentile":0.37064}],"risk":0.34637500000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553121395"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113284","description":"Use after free in XML in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113300","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113300","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113300","cwe":"CWE-203","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113300","date":"2026-11-07","epss":0.0037,"percentile":0.31108}],"risk":0.3441,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/513468106"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113300","description":"Observable discrepancy in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-118306","versionConstraint":"< 156.0.8078.73 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-118306","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118306","cwe":"CWE-416","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-118306","date":"2026-11-07","epss":0.00369,"percentile":0.30929}],"risk":0.34317,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html","https://issues.chromium.org/issues/571156746"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-118306","description":"Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121200","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121200","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121200","cwe":"CWE-706","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121200","date":"2026-11-07","epss":0.00368,"percentile":0.30901}],"risk":0.34224,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/528485835"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121200","description":"Incorrect reference resolution in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113154","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113154","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113154","cwe":"CWE-416","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113154","date":"2026-11-07","epss":0.00417,"percentile":0.36262}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/569127861"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113154","description":"Use after free in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113232","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113232","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113232","cwe":"CWE-416","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113232","date":"2026-11-07","epss":0.00417,"percentile":0.36262}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/513226023"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113232","description":"Use after free in Search in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113003","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113003","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113003","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113003","date":"2026-11-07","epss":0.00417,"percentile":0.36261}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/505024593"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113003","description":"Memory corruption in HID in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113093","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113093","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113093","cwe":"CWE-416","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113093","date":"2026-11-07","epss":0.00417,"percentile":0.36261}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/567612004"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113093","description":"Use after free in DisplayLocking in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113095","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113095","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113095","cwe":"CWE-416","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113095","date":"2026-11-07","epss":0.00417,"percentile":0.36261}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/570167919"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113095","description":"Use after free in Focus in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113104","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113104","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113104","cwe":"CWE-416","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113104","date":"2026-11-07","epss":0.00417,"percentile":0.36261}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/535749304"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113104","description":"Use after free in Frames in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113133","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113133","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113133","cwe":"CWE-416","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113133","date":"2026-11-07","epss":0.00417,"percentile":0.36261}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/565349184"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113133","description":"Use after free in PlatformIntegration in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-112998","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-112998","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112998","cwe":"CWE-416","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-112998","date":"2026-11-07","epss":0.00417,"percentile":0.3626}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553134101"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112998","description":"Use after free in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"3bfc5b995b5339c1","cpes":["cpe:2.3:a:pixman:pixman:0.46.4-r0:*:*:*:*:*:*:*"],"name":"pixman","purl":"pkg:apk/alpine/pixman@0.46.4-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"0.46.4-r0","language":"","licenses":["MIT"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpixman-1.so.0"},{"path":"/usr/lib/libpixman-1.so.0.46.4"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"pixman"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:pixman:pixman:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2023-37769","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:pixman:pixman:0.46.4:*:*:*:*:*:*:*"],"package":{"name":"pixman","version":"0.46.4-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2023-37769","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-37769","cwe":"CWE-369","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-37769","date":"2026-11-07","epss":0.00586,"percentile":0.4827}],"risk":0.33694999999999997,"urls":["https://gitlab.freedesktop.org/pixman/pixman/-/issues/76"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-37769","description":"stress-test master commit e4c878 was discovered to contain a FPE vulnerability via the component combine_inner at /pixman-combine-float.c."},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113343","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113343","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113343","cwe":"CWE-863","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113343","date":"2026-11-07","epss":0.0041,"percentile":0.35475}],"risk":0.33415000000000006,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/502376419"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113343","description":"Incorrect authorization in Sandbox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"d690b425b757db47","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107695","versionConstraint":"< 8.1.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107695","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107695","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107695","date":"2026-11-07","epss":0.00467,"percentile":0.40643}],"risk":0.33390499999999995,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23618","https://gist.github.com/OxBat/59574a2940092cda1b6e76bbf96f53d0","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n8.1.2/libavformat/hls.c#L866","https://github.com/FFmpeg/FFmpeg/commit/0e6eef35517a","https://github.com/FFmpeg/FFmpeg/commit/a4ddaba8bb78","https://github.com/FFmpeg/FFmpeg/commit/c364ab176f722bdabc886845e770c9eacbc1e3e5","https://www.vulncheck.com/advisories/ffmpeg-before-8.1.3-hls-demuxer-infinite-loop-via-self-referencing-playlist"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107695","description":"FFmpeg before 8.1.3 contains an infinite loop vulnerability in the HLS demuxer that allows remote attackers to cause denial of service because parse_playlist() accepts Master Playlist tags inside Media Playlists. Attackers can trick victims into opening a crafted self-referencing playlist that endlessly adds variants in hls_read_header(), causing unbounded CPU and I/O consumption."},"relatedVulnerabilities":[]},{"artifact":{"id":"243e974ceb6a5245","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107695","versionConstraint":"< 8.1.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107695","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107695","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107695","date":"2026-11-07","epss":0.00467,"percentile":0.40643}],"risk":0.33390499999999995,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23618","https://gist.github.com/OxBat/59574a2940092cda1b6e76bbf96f53d0","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n8.1.2/libavformat/hls.c#L866","https://github.com/FFmpeg/FFmpeg/commit/0e6eef35517a","https://github.com/FFmpeg/FFmpeg/commit/a4ddaba8bb78","https://github.com/FFmpeg/FFmpeg/commit/c364ab176f722bdabc886845e770c9eacbc1e3e5","https://www.vulncheck.com/advisories/ffmpeg-before-8.1.3-hls-demuxer-infinite-loop-via-self-referencing-playlist"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107695","description":"FFmpeg before 8.1.3 contains an infinite loop vulnerability in the HLS demuxer that allows remote attackers to cause denial of service because parse_playlist() accepts Master Playlist tags inside Media Playlists. Attackers can trick victims into opening a crafted self-referencing playlist that endlessly adds variants in hls_read_header(), causing unbounded CPU and I/O consumption."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6896ca1d5ee5394","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107695","versionConstraint":"< 8.1.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107695","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107695","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107695","date":"2026-11-07","epss":0.00467,"percentile":0.40643}],"risk":0.33390499999999995,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23618","https://gist.github.com/OxBat/59574a2940092cda1b6e76bbf96f53d0","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n8.1.2/libavformat/hls.c#L866","https://github.com/FFmpeg/FFmpeg/commit/0e6eef35517a","https://github.com/FFmpeg/FFmpeg/commit/a4ddaba8bb78","https://github.com/FFmpeg/FFmpeg/commit/c364ab176f722bdabc886845e770c9eacbc1e3e5","https://www.vulncheck.com/advisories/ffmpeg-before-8.1.3-hls-demuxer-infinite-loop-via-self-referencing-playlist"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107695","description":"FFmpeg before 8.1.3 contains an infinite loop vulnerability in the HLS demuxer that allows remote attackers to cause denial of service because parse_playlist() accepts Master Playlist tags inside Media Playlists. Attackers can trick victims into opening a crafted self-referencing playlist that endlessly adds variants in hls_read_header(), causing unbounded CPU and I/O consumption."},"relatedVulnerabilities":[]},{"artifact":{"id":"1c27d303595909ee","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107695","versionConstraint":"< 8.1.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107695","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107695","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107695","date":"2026-11-07","epss":0.00467,"percentile":0.40643}],"risk":0.33390499999999995,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23618","https://gist.github.com/OxBat/59574a2940092cda1b6e76bbf96f53d0","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n8.1.2/libavformat/hls.c#L866","https://github.com/FFmpeg/FFmpeg/commit/0e6eef35517a","https://github.com/FFmpeg/FFmpeg/commit/a4ddaba8bb78","https://github.com/FFmpeg/FFmpeg/commit/c364ab176f722bdabc886845e770c9eacbc1e3e5","https://www.vulncheck.com/advisories/ffmpeg-before-8.1.3-hls-demuxer-infinite-loop-via-self-referencing-playlist"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107695","description":"FFmpeg before 8.1.3 contains an infinite loop vulnerability in the HLS demuxer that allows remote attackers to cause denial of service because parse_playlist() accepts Master Playlist tags inside Media Playlists. Attackers can trick victims into opening a crafted self-referencing playlist that endlessly adds variants in hls_read_header(), causing unbounded CPU and I/O consumption."},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113033","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113033","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113033","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113033","date":"2026-11-07","epss":0.00409,"percentile":0.35412}],"risk":0.333335,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/499869964"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113033","description":"Use after free in Streaming in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via crafted network traffic. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113261","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113261","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113261","cwe":"CWE-20","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113261","date":"2026-11-07","epss":0.00358,"percentile":0.29749}],"risk":0.33293999999999996,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/515440087"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113261","description":"Improper input validation in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113342","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113342","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113342","cwe":"CWE-250","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113342","date":"2026-11-07","epss":0.00358,"percentile":0.29749}],"risk":0.33293999999999996,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562024413"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113342","description":"Privilege elevation in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113212","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113212","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L","metrics":{"baseScore":8.3,"impactScore":5.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113212","cwe":"CWE-416","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113212","date":"2026-11-07","epss":0.00414,"percentile":0.35933}],"risk":0.33223499999999995,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/572237007"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113212","description":"Use after free in PDF in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113222","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113222","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113222","cwe":"CWE-862","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113222","date":"2026-11-07","epss":0.00357,"percentile":0.29665}],"risk":0.3320099999999999,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/566091009"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113222","description":"Missing authorization in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113014","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113014","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113014","cwe":"CWE-862","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113014","date":"2026-11-07","epss":0.00356,"percentile":0.29542}],"risk":0.33108,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/502251640"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113014","description":"Missing authorization in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113235","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113235","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113235","cwe":"CWE-862","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113235","date":"2026-11-07","epss":0.00356,"percentile":0.29541}],"risk":0.33108,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/563352925"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113235","description":"Missing authorization in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121044","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121044","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121044","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121044","date":"2026-11-07","epss":0.00406,"percentile":0.3508}],"risk":0.3308900000000001,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/568832157"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121044","description":"Use after free in Layout in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121052","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121052","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121052","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121052","date":"2026-11-07","epss":0.00406,"percentile":0.3508}],"risk":0.3308900000000001,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/569129173"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121052","description":"Use after free in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113189","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113189","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113189","cwe":"CWE-20","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113189","date":"2026-11-07","epss":0.00355,"percentile":0.29442}],"risk":0.33015,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/514016335"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113189","description":"Improper input validation in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113238","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113238","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113238","cwe":"CWE-221","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113238","date":"2026-11-07","epss":0.00405,"percentile":0.34989}],"risk":0.330075,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/513789297"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113238","description":"Information loss in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113029","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113029","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113029","cwe":"CWE-787","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113029","date":"2026-11-07","epss":0.00404,"percentile":0.34866}],"risk":0.32926000000000005,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/523708661"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113029","description":"Out of bounds write in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113175","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113175","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113175","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113175","date":"2026-11-07","epss":0.00404,"percentile":0.34866}],"risk":0.32926000000000005,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/568822820"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113175","description":"Improper input validation in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-118321","versionConstraint":"< 156.0.8078.73 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-118321","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118321","cwe":"CWE-416","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-118321","date":"2026-11-07","epss":0.00354,"percentile":0.29324}],"risk":0.32922,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html","https://issues.chromium.org/issues/568937139"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-118321","description":"Use after free in Core in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113315","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113315","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113315","cwe":"CWE-908","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113315","date":"2026-11-07","epss":0.00403,"percentile":0.34842}],"risk":0.328445,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553117511"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113315","description":"Uninitialized resource in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113324","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113324","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113324","cwe":"CWE-908","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113324","date":"2026-11-07","epss":0.00403,"percentile":0.34842}],"risk":0.328445,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/563357593"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113324","description":"Uninitialized resource in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113332","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113332","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113332","cwe":"CWE-908","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113332","date":"2026-11-07","epss":0.00403,"percentile":0.34842}],"risk":0.328445,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/517031871"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113332","description":"Uninitialized resource in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121226","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121226","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121226","cwe":"CWE-843","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121226","date":"2026-11-07","epss":0.00403,"percentile":0.34804}],"risk":0.328445,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/577318603"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121226","description":"Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121082","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121082","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121082","cwe":"CWE-843","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121082","date":"2026-11-07","epss":0.00403,"percentile":0.34803}],"risk":0.328445,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/567222737"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121082","description":"Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121094","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121094","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121094","cwe":"CWE-843","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121094","date":"2026-11-07","epss":0.00403,"percentile":0.34803}],"risk":0.328445,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/574339635"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121094","description":"Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121221","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121221","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121221","cwe":"CWE-843","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121221","date":"2026-11-07","epss":0.00403,"percentile":0.34803}],"risk":0.328445,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/578688670"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121221","description":"Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121228","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121228","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121228","cwe":"CWE-843","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121228","date":"2026-11-07","epss":0.00403,"percentile":0.34803}],"risk":0.328445,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/568794851"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121228","description":"Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121078","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121078","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121078","cwe":"CWE-843","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121078","date":"2026-11-07","epss":0.00403,"percentile":0.34802}],"risk":0.328445,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/578083257"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121078","description":"Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121137","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121137","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121137","cwe":"CWE-843","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121137","date":"2026-11-07","epss":0.00403,"percentile":0.34802}],"risk":0.328445,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/577352626"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121137","description":"Type confusion in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121210","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121210","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121210","cwe":"CWE-843","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121210","date":"2026-11-07","epss":0.00403,"percentile":0.34802}],"risk":0.328445,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/574021176"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121210","description":"Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121233","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121233","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121233","cwe":"CWE-843","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121233","date":"2026-11-07","epss":0.00403,"percentile":0.34802}],"risk":0.328445,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/552757015"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121233","description":"Type confusion in CacheStorage in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121068","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121068","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121068","cwe":"CWE-843","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121068","date":"2026-11-07","epss":0.00403,"percentile":0.34801}],"risk":0.328445,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/577327383"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121068","description":"Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121218","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121218","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121218","cwe":"CWE-843","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121218","date":"2026-11-07","epss":0.00403,"percentile":0.34801}],"risk":0.328445,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/568010379"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121218","description":"Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121180","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121180","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121180","cwe":"CWE-122","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121180","date":"2026-11-07","epss":0.00402,"percentile":0.34724}],"risk":0.32763000000000003,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/567936265"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121180","description":"Buffer overflow in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113255","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113255","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113255","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113255","date":"2026-11-07","epss":0.00401,"percentile":0.34559}],"risk":0.326815,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/518065595"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113255","description":"Use after free in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113007","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113007","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113007","cwe":"CWE-682","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113007","date":"2026-11-07","epss":0.00351,"percentile":0.28951}],"risk":0.32643,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553394270"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113007","description":"Incorrect calculation in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113126","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113126","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113126","cwe":"CWE-668","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113126","date":"2026-11-07","epss":0.00351,"percentile":0.28951}],"risk":0.32643,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/531182364"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113126","description":"Improper resource exposure in PolicyContainer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113138","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113138","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113138","cwe":"CWE-451","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113138","date":"2026-11-07","epss":0.00348,"percentile":0.28627}],"risk":0.32364,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/561396577"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113138","description":"UI misrepresentation in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to spoof address bar via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-112992","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-112992","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112992","cwe":"CWE-203","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-112992","date":"2026-11-07","epss":0.00348,"percentile":0.28626}],"risk":0.32364,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/514422784"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112992","description":"Observable discrepancy in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113056","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113056","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113056","cwe":"CWE-203","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113056","date":"2026-11-07","epss":0.00348,"percentile":0.28624}],"risk":0.32364,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/502288792"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113056","description":"Observable discrepancy in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113270","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113270","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113270","cwe":"CWE-862","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113270","date":"2026-11-07","epss":0.00345,"percentile":0.28196}],"risk":0.32084999999999997,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/557501968"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113270","description":"Missing authorization in Internals in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113039","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113039","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113039","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113039","date":"2026-11-07","epss":0.00393,"percentile":0.33737}],"risk":0.32029500000000005,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/566069559"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113039","description":"Use after free in Bookmarks in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113258","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113258","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113258","cwe":"CWE-416","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113258","date":"2026-11-07","epss":0.00393,"percentile":0.33695}],"risk":0.32029500000000005,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562236876"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113258","description":"Use after free in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"d690b425b757db47","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66036","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66036","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66036","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66036","date":"2026-11-07","epss":0.00401,"percentile":0.34564}],"risk":0.31946333333333327,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66036","description":"FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability in the vf_hqdn3d filter that allows attackers to corrupt heap memory by supplying a crafted video whose frame resolution increases between frames when filtergraph reinitialization is disabled via the -reinit_filter 0 option. Attackers can provide a malicious video input where vf_hqdn3d.config_input() allocates undersized per-plane line-history buffers based on the initial frame width, and subsequent larger frames cause denoise_spatial() to write beyond the allocation boundary, resulting in heap memory corruption."},"relatedVulnerabilities":[]},{"artifact":{"id":"243e974ceb6a5245","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66036","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66036","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66036","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66036","date":"2026-11-07","epss":0.00401,"percentile":0.34564}],"risk":0.31946333333333327,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66036","description":"FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability in the vf_hqdn3d filter that allows attackers to corrupt heap memory by supplying a crafted video whose frame resolution increases between frames when filtergraph reinitialization is disabled via the -reinit_filter 0 option. Attackers can provide a malicious video input where vf_hqdn3d.config_input() allocates undersized per-plane line-history buffers based on the initial frame width, and subsequent larger frames cause denoise_spatial() to write beyond the allocation boundary, resulting in heap memory corruption."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6896ca1d5ee5394","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66036","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66036","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66036","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66036","date":"2026-11-07","epss":0.00401,"percentile":0.34564}],"risk":0.31946333333333327,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66036","description":"FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability in the vf_hqdn3d filter that allows attackers to corrupt heap memory by supplying a crafted video whose frame resolution increases between frames when filtergraph reinitialization is disabled via the -reinit_filter 0 option. Attackers can provide a malicious video input where vf_hqdn3d.config_input() allocates undersized per-plane line-history buffers based on the initial frame width, and subsequent larger frames cause denoise_spatial() to write beyond the allocation boundary, resulting in heap memory corruption."},"relatedVulnerabilities":[]},{"artifact":{"id":"1c27d303595909ee","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66036","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66036","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66036","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66036","date":"2026-11-07","epss":0.00401,"percentile":0.34564}],"risk":0.31946333333333327,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66036","description":"FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability in the vf_hqdn3d filter that allows attackers to corrupt heap memory by supplying a crafted video whose frame resolution increases between frames when filtergraph reinitialization is disabled via the -reinit_filter 0 option. Attackers can provide a malicious video input where vf_hqdn3d.config_input() allocates undersized per-plane line-history buffers based on the initial frame width, and subsequent larger frames cause denoise_spatial() to write beyond the allocation boundary, resulting in heap memory corruption."},"relatedVulnerabilities":[]},{"artifact":{"id":"71d5b1bc967e2a74","cpes":["cpe:2.3:a:libexpat:libexpat:2.9.0-r0:*:*:*:*:*:*:*"],"name":"libexpat","purl":"pkg:apk/alpine/libexpat@2.9.0-r0?arch=x86_64&distro=alpine-3.24.3&upstream=expat","type":"apk","version":"2.9.0-r0","language":"","licenses":["MIT"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libexpat.so.1"},{"path":"/usr/lib/libexpat.so.1.13.0"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"expat"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.10.0-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-117610","versionConstraint":"< 2.10.0-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"expat","version":"2.9.0-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-117610","fix":{"state":"fixed","versions":["2.10.0-r0"],"available":[{"date":"2026-11-03","kind":"first-observed","version":"2.10.0-r0"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-117610","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-117610","date":"2026-11-07","epss":0.00425,"percentile":0.37061}],"risk":0.31875000000000003,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-117610"},"relatedVulnerabilities":[{"id":"CVE-2026-117610","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-117610","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-117610","date":"2026-11-07","epss":0.00425,"percentile":0.37061}],"urls":["https://github.com/libexpat/libexpat","https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L3468-L3510","https://github.com/libexpat/libexpat/commit/7b0d50e4b1d16fafd55876260701e04279a7489d","https://github.com/libexpat/libexpat/pull/1444","https://www.vulncheck.com/advisories/libexpat-through-2.9.0-null-pointer-dereference-via-external-entity-subparser"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-117610","description":"libexpat through 2.9.0 contains a NULL pointer dereference vulnerability in externalEntityInitProcessor2() in lib/xmlparse.c that mishandles the XML_TOK_NONE token from empty input. Attackers who control stream chunking can force an empty non-final first parse on an external entity subparser, causing a later parse to crash the application."}]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113213","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113213","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113213","cwe":"CWE-74","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113213","date":"2026-11-07","epss":0.0039,"percentile":0.33344}],"risk":0.31784999999999997,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/513686739"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113213","description":"Injection in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113140","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113140","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113140","cwe":"CWE-908","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113140","date":"2026-11-07","epss":0.00388,"percentile":0.33121}],"risk":0.31622000000000006,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/536445815"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113140","description":"Uninitialized resource in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113313","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113313","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113313","cwe":"CWE-863","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113313","date":"2026-11-07","epss":0.00387,"percentile":0.33088}],"risk":0.31540500000000005,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/554475322"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113313","description":"Incorrect authorization in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113267","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113267","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113267","cwe":"CWE-908","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113267","date":"2026-11-07","epss":0.00387,"percentile":0.33059}],"risk":0.31540500000000005,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/559707641"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113267","description":"Uninitialized resource in Video in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113188","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113188","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113188","cwe":"CWE-908","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113188","date":"2026-11-07","epss":0.00387,"percentile":0.33058}],"risk":0.31540500000000005,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/533122125"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113188","description":"Uninitialized resource in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113078","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113078","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113078","cwe":"CWE-367","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113078","date":"2026-11-07","epss":0.00339,"percentile":0.27463}],"risk":0.31526999999999994,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/499520020"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113078","description":"Race condition in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121098","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121098","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121098","cwe":"CWE-754","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121098","date":"2026-11-07","epss":0.00399,"percentile":0.34446}],"risk":0.31521,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/516958782"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121098","description":"Improper state validation in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121076","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121076","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121076","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121076","date":"2026-11-07","epss":0.00338,"percentile":0.27358}],"risk":0.31433999999999995,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/578670966"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121076","description":"Use after free in WebXR in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121077","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121077","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121077","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121077","date":"2026-11-07","epss":0.00338,"percentile":0.27358}],"risk":0.31433999999999995,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/570026368"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121077","description":"Use after free in Mobile in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121241","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121241","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121241","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121241","date":"2026-11-07","epss":0.00338,"percentile":0.27358}],"risk":0.31433999999999995,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/574791491"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121241","description":"Use after free in Navigation in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113040","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113040","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113040","cwe":"CWE-416","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113040","date":"2026-11-07","epss":0.00385,"percentile":0.32809}],"risk":0.313775,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/568906040"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113040","description":"Use after free in Proxy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113065","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113065","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113065","cwe":"CWE-20","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113065","date":"2026-11-07","epss":0.00385,"percentile":0.32809}],"risk":0.313775,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562223549"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113065","description":"Improper input validation in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted media file. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113021","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113021","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113021","cwe":"CWE-863","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113021","date":"2026-11-07","epss":0.00384,"percentile":0.32737}],"risk":0.31296,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553146562"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113021","description":"Incorrect authorization in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113274","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113274","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113274","cwe":"CWE-79","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113274","date":"2026-11-07","epss":0.00382,"percentile":0.3244}],"risk":0.31133000000000005,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/570715681"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113274","description":"Cross-site scripting in ReadingMode in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113031","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113031","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113031","cwe":"CWE-908","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113031","date":"2026-11-07","epss":0.0038,"percentile":0.32266}],"risk":0.30970000000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/532939000"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113031","description":"Uninitialized resource in Media in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to potentially read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113081","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113081","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113081","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113081","date":"2026-11-07","epss":0.0038,"percentile":0.32219}],"risk":0.30970000000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/534956586"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113081","description":"Use after free in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113087","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113087","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113087","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113087","date":"2026-11-07","epss":0.0038,"percentile":0.32219}],"risk":0.30970000000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/558301759"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113087","description":"Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113123","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113123","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113123","cwe":"CWE-908","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113123","date":"2026-11-07","epss":0.0038,"percentile":0.32205}],"risk":0.30970000000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/551930637"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113123","description":"Uninitialized resource in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113234","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113234","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113234","cwe":"CWE-908","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113234","date":"2026-11-07","epss":0.0038,"percentile":0.32205}],"risk":0.30970000000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/556750158"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113234","description":"Uninitialized resource in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113106","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113106","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113106","cwe":"CWE-843","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113106","date":"2026-11-07","epss":0.0038,"percentile":0.32204}],"risk":0.30970000000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553126587"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113106","description":"Type confusion in Skia in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113120","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113120","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113120","cwe":"CWE-457","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113120","date":"2026-11-07","epss":0.0038,"percentile":0.32204}],"risk":0.30970000000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/560476932"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113120","description":"Use of uninitialized variable in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113073","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113073","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113073","cwe":"CWE-459","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113073","date":"2026-11-07","epss":0.0038,"percentile":0.32188}],"risk":0.30970000000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/519217664"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113073","description":"Incomplete cleanup in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113015","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113015","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113015","cwe":"CWE-863","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113015","date":"2026-11-07","epss":0.0038,"percentile":0.32178}],"risk":0.30970000000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/497408124"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113015","description":"Incorrect authorization in Workers in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113183","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113183","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113183","cwe":"CWE-863","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113183","date":"2026-11-07","epss":0.0038,"percentile":0.32178}],"risk":0.30970000000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/507227196"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113183","description":"Incorrect authorization in FedCM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113174","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113174","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113174","cwe":"CWE-862","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113174","date":"2026-11-07","epss":0.0038,"percentile":0.32177}],"risk":0.30970000000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/501419037"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113174","description":"Missing authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113202","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113202","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113202","cwe":"CWE-441","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113202","date":"2026-11-07","epss":0.0038,"percentile":0.32177}],"risk":0.30970000000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/523201686"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113202","description":"Confused deputy in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113215","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113215","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113215","cwe":"CWE-862","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113215","date":"2026-11-07","epss":0.0038,"percentile":0.32177}],"risk":0.30970000000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/40092886"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113215","description":"Missing authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113301","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113301","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113301","cwe":"CWE-441","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113301","date":"2026-11-07","epss":0.0038,"percentile":0.32177}],"risk":0.30970000000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/497299147"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113301","description":"Confused deputy in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113024","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113024","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113024","cwe":"CWE-441","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113024","date":"2026-11-07","epss":0.0038,"percentile":0.32176}],"risk":0.30970000000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/533043403"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113024","description":"Confused deputy in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113053","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113053","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113053","cwe":"CWE-863","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113053","date":"2026-11-07","epss":0.0038,"percentile":0.32176}],"risk":0.30970000000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/40061291"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113053","description":"Incorrect authorization in Cookies in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113294","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113294","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113294","cwe":"CWE-863","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113294","date":"2026-11-07","epss":0.0038,"percentile":0.32176}],"risk":0.30970000000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/563015337"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113294","description":"Incorrect authorization in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113299","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113299","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113299","cwe":"CWE-863","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113299","date":"2026-11-07","epss":0.0038,"percentile":0.32176}],"risk":0.30970000000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/532987588"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113299","description":"Incorrect authorization in WebProtect in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113272","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113272","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113272","cwe":"CWE-863","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113272","date":"2026-11-07","epss":0.00378,"percentile":0.32003}],"risk":0.30807,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/513486355"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113272","description":"Incorrect authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113145","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113145","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113145","cwe":"CWE-451","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113145","date":"2026-11-07","epss":0.00378,"percentile":0.31957}],"risk":0.30807,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553169805"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113145","description":"UI misrepresentation in Messages in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113088","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113088","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113088","cwe":"CWE-451","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113088","date":"2026-11-07","epss":0.00378,"percentile":0.31956}],"risk":0.30807,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/563812927"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113088","description":"UI misrepresentation in Mobile in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113156","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113156","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113156","cwe":"CWE-451","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113156","date":"2026-11-07","epss":0.00378,"percentile":0.31956}],"risk":0.30807,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553253820"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113156","description":"UI misrepresentation in Messages in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113314","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113314","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113314","cwe":"CWE-203","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113314","date":"2026-11-07","epss":0.00378,"percentile":0.31956}],"risk":0.30807,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562970433"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113314","description":"Observable discrepancy in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113023","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113023","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113023","cwe":"CWE-863","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113023","date":"2026-11-07","epss":0.00331,"percentile":0.26489}],"risk":0.30783,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/517148875"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113023","description":"Incorrect authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"71d5b1bc967e2a74","cpes":["cpe:2.3:a:libexpat:libexpat:2.9.0-r0:*:*:*:*:*:*:*"],"name":"libexpat","purl":"pkg:apk/alpine/libexpat@2.9.0-r0?arch=x86_64&distro=alpine-3.24.3&upstream=expat","type":"apk","version":"2.9.0-r0","language":"","licenses":["MIT"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libexpat.so.1"},{"path":"/usr/lib/libexpat.so.1.13.0"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"expat"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.10.0-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-118370","versionConstraint":"< 2.10.0-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"expat","version":"2.9.0-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-118370","fix":{"state":"fixed","versions":["2.10.0-r0"],"available":[{"date":"2026-11-03","kind":"first-observed","version":"2.10.0-r0"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118370","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-118370","date":"2026-11-07","epss":0.00391,"percentile":0.33478}],"risk":0.30693499999999996,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-118370"},"relatedVulnerabilities":[{"id":"CVE-2026-118370","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118370","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-118370","date":"2026-11-07","epss":0.00391,"percentile":0.33478}],"urls":["https://github.com/libexpat/libexpat","https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L4138-L4140","https://github.com/libexpat/libexpat/commit/1bac53c4fc460a03cd9860f39501c7979f6750ae","https://github.com/libexpat/libexpat/commit/621cb2c78b253ee023a86bc91d6ddb048481c04c","https://github.com/libexpat/libexpat/pull/1450","https://www.vulncheck.com/advisories/libexpat-through-2.9.0-integer-overflow-in-storeatts-via-attindex-and-nprefixes"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-118370","description":"libexpat through 2.9.0 contains a signed integer overflow vulnerability in storeAtts() in lib/xmlparse.c that allows attackers to trigger out-of-bounds writes via oversized attribute counts. Attackers can supply a multi-gigabyte document with a start tag carrying over 2^30 attributes to overflow attIndex and nPrefixes, crashing applications or corrupting heap memory."}]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113263","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113263","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113263","cwe":"CWE-862","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113263","date":"2026-11-07","epss":0.0033,"percentile":0.26248}],"risk":0.30689999999999995,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/497026542"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113263","description":"Missing authorization in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"feb6e072f4cd4421","cpes":["cpe:2.3:a:golang:networking:v0.58.0:*:*:*:*:go:*:*","cpe:2.3:a:golang:net:v0.58.0:*:*:*:*:go:*:*"],"name":"golang.org/x/net","purl":"pkg:golang/golang.org/x/net@v0.58.0","type":"go-module","version":"v0.58.0","language":"go","licenses":[],"metadata":{"h1Digest":"h1:ynWG7rqYi4ccpTEuPZ2QGWHktVEM9DMCj9yzDE0Q7To=","mainModule":"k6","architecture":"amd64","goCompiledVersion":"go1.26.10"},"locations":[{"path":"/usr/libexec/sm-k6/k6-v2","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/usr/libexec/sm-k6/k6-v2","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.62.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6860","versionConstraint":"<0.62.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/net","version":"v0.58.0"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6860","fix":{"state":"fixed","versions":["0.62.0"],"available":[{"date":"2026-10-27","kind":"release","version":"0.62.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78661","cwe":"CWE-407","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78661","date":"2026-11-07","epss":0.00409,"percentile":0.35396}],"risk":0.30674999999999997,"urls":["https://go.dev/issue/82224","https://groups.google.com/g/golang-announce/c/sqrs2vTx_Xs"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/849365","description":"When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation (n.Data += text) reallocated and copied the accumulated string on every token. Inputs containing many short text runs separated by ignored end tags (such as \"a</x>\") caused O(n^2) allocations and byte copies.\n\nAccumulate coalesced text in per-node byte slices during parsing and materialize Data strings once at the end of parse."},"relatedVulnerabilities":[{"id":"CVE-2026-78661","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78661","cwe":"CWE-407","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78661","date":"2026-11-07","epss":0.00409,"percentile":0.35396}],"urls":["https://go.dev/cl/849365","https://go.dev/issue/82224","https://groups.google.com/g/golang-announce/c/sqrs2vTx_Xs","https://pkg.go.dev/vuln/GO-2026-6860"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78661","description":"When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation (n.Data += text) reallocated and copied the accumulated string on every token. Inputs containing many short text runs separated by ignored end tags (such as \"a</x>\") caused O(n^2) allocations and byte copies. Accumulate coalesced text in per-node byte slices during parsing and materialize Data strings once at the end of parse."}]},{"artifact":{"id":"b97f93e068610d3f","cpes":["cpe:2.3:a:golang:networking:v0.61.0:*:*:*:*:go:*:*","cpe:2.3:a:golang:net:v0.61.0:*:*:*:*:go:*:*"],"name":"golang.org/x/net","purl":"pkg:golang/golang.org/x/net@v0.61.0","type":"go-module","version":"v0.61.0","language":"go","licenses":[],"metadata":{"h1Digest":"h1:RR+6j/BTBCrggOLugxa+66R8FvoN6MHlzDlZIbN9YFw=","mainModule":"k6","architecture":"amd64","goCompiledVersion":"go1.26.10"},"locations":[{"path":"/usr/libexec/sm-k6/k6-v1","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/usr/libexec/sm-k6/k6-v1","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.62.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6860","versionConstraint":"<0.62.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/net","version":"v0.61.0"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6860","fix":{"state":"fixed","versions":["0.62.0"],"available":[{"date":"2026-10-27","kind":"release","version":"0.62.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78661","cwe":"CWE-407","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78661","date":"2026-11-07","epss":0.00409,"percentile":0.35396}],"risk":0.30674999999999997,"urls":["https://go.dev/issue/82224","https://groups.google.com/g/golang-announce/c/sqrs2vTx_Xs"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/849365","description":"When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation (n.Data += text) reallocated and copied the accumulated string on every token. Inputs containing many short text runs separated by ignored end tags (such as \"a</x>\") caused O(n^2) allocations and byte copies.\n\nAccumulate coalesced text in per-node byte slices during parsing and materialize Data strings once at the end of parse."},"relatedVulnerabilities":[{"id":"CVE-2026-78661","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78661","cwe":"CWE-407","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78661","date":"2026-11-07","epss":0.00409,"percentile":0.35396}],"urls":["https://go.dev/cl/849365","https://go.dev/issue/82224","https://groups.google.com/g/golang-announce/c/sqrs2vTx_Xs","https://pkg.go.dev/vuln/GO-2026-6860"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78661","description":"When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation (n.Data += text) reallocated and copied the accumulated string on every token. Inputs containing many short text runs separated by ignored end tags (such as \"a</x>\") caused O(n^2) allocations and byte copies. Accumulate coalesced text in per-node byte slices during parsing and materialize Data strings once at the end of parse."}]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113089","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113089","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113089","cwe":"CWE-863","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113089","date":"2026-11-07","epss":0.00329,"percentile":0.26162}],"risk":0.30596999999999996,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/563362367"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113089","description":"Incorrect authorization in PrintPreview in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain sensitive information via a crafted Chrome extension. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113211","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113211","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113211","cwe":"CWE-863","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113211","date":"2026-11-07","epss":0.00328,"percentile":0.26123}],"risk":0.30504,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/498828493"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113211","description":"Incorrect authorization in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121202","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121202","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121202","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121202","date":"2026-11-07","epss":0.00328,"percentile":0.26115}],"risk":0.30504,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/566935544"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121202","description":"Use after free in Autofill in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121234","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121234","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121234","cwe":"CWE-250","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121234","date":"2026-11-07","epss":0.00328,"percentile":0.26115}],"risk":0.30504,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/513767200"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121234","description":"Privilege elevation in Contacts in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113195","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113195","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113195","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113195","date":"2026-11-07","epss":0.00373,"percentile":0.31436}],"risk":0.303995,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/518055043"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113195","description":"Improper input validation in Downloads in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113243","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113243","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113243","cwe":"CWE-200","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113243","date":"2026-11-07","epss":0.00372,"percentile":0.31373}],"risk":0.30318,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553147798"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113243","description":"Information leak in DOM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113320","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113320","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113320","cwe":"CWE-451","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113320","date":"2026-11-07","epss":0.00372,"percentile":0.31373}],"risk":0.30318,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/429432679"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113320","description":"UI misrepresentation in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to spoof address bar via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113269","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113269","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113269","cwe":"CWE-862","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113269","date":"2026-11-07","epss":0.00372,"percentile":0.31344}],"risk":0.30318,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553334273"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113269","description":"Missing authorization in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121104","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121104","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121104","cwe":"CWE-863","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121104","date":"2026-11-07","epss":0.00325,"percentile":0.25748}],"risk":0.30224999999999996,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/577400245"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121104","description":"Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113135","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113135","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113135","cwe":"CWE-416","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113135","date":"2026-11-07","epss":0.0037,"percentile":0.31112}],"risk":0.30155000000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/560251733"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113135","description":"Use after free in PictureInPicture in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113086","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113086","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113086","cwe":"CWE-416","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113086","date":"2026-11-07","epss":0.0037,"percentile":0.31111}],"risk":0.30155000000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/567673405"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113086","description":"Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113091","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113091","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113091","cwe":"CWE-200","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113091","date":"2026-11-07","epss":0.0037,"percentile":0.31109}],"risk":0.30155000000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/497433155"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113091","description":"Information leak in PerformanceAPIs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113096","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113096","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113096","cwe":"CWE-451","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113096","date":"2026-11-07","epss":0.0037,"percentile":0.31108}],"risk":0.30155000000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562238089"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113096","description":"UI misrepresentation in Text in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to spoof address bar via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113206","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113206","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113206","cwe":"CWE-451","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113206","date":"2026-11-07","epss":0.0037,"percentile":0.31108}],"risk":0.30155000000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/517407917"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113206","description":"UI misrepresentation in Omnibox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113308","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113308","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113308","cwe":"CWE-841","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113308","date":"2026-11-07","epss":0.0037,"percentile":0.31108}],"risk":0.30155000000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/518102808"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113308","description":"Inappropriate implementation in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113055","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113055","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113055","cwe":"CWE-451","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113055","date":"2026-11-07","epss":0.0037,"percentile":0.31107}],"risk":0.30155000000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/340578708"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113055","description":"UI misrepresentation in FullScreen in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113197","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113197","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113197","cwe":"CWE-203","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113197","date":"2026-11-07","epss":0.0037,"percentile":0.31107}],"risk":0.30155000000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562230410"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113197","description":"Observable discrepancy in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113312","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113312","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113312","cwe":"CWE-451","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113312","date":"2026-11-07","epss":0.0037,"percentile":0.31107}],"risk":0.30155000000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/439873332"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113312","description":"UI misrepresentation in Autofill in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113331","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113331","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113331","cwe":"CWE-203","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113331","date":"2026-11-07","epss":0.0037,"percentile":0.31107}],"risk":0.30155000000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562993085"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113331","description":"Observable discrepancy in Controls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113025","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113025","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113025","cwe":"CWE-451","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113025","date":"2026-11-07","epss":0.0037,"percentile":0.31106}],"risk":0.30155000000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/533113044"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113025","description":"UI misrepresentation in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113167","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113167","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113167","cwe":"CWE-203","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113167","date":"2026-11-07","epss":0.0037,"percentile":0.31106}],"risk":0.30155000000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/513692667"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113167","description":"Observable discrepancy in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113194","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113194","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113194","cwe":"CWE-20","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113194","date":"2026-11-07","epss":0.0037,"percentile":0.31106}],"risk":0.30155000000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/513989760"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113194","description":"Improper input validation in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113323","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113323","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113323","cwe":"CWE-451","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113323","date":"2026-11-07","epss":0.0037,"percentile":0.31106}],"risk":0.30155000000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/480153486"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113323","description":"UI misrepresentation in Chrome for iOS in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113182","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113182","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113182","cwe":"CWE-451","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113182","date":"2026-11-07","epss":0.0037,"percentile":0.31105}],"risk":0.30155000000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562994234"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113182","description":"UI misrepresentation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113298","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113298","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113298","cwe":"CWE-451","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113298","date":"2026-11-07","epss":0.0037,"percentile":0.31105}],"risk":0.30155000000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553117374"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113298","description":"UI misrepresentation in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121083","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121083","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121083","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121083","date":"2026-11-07","epss":0.0037,"percentile":0.31068}],"risk":0.30155000000000004,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/567321055"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121083","description":"Use after free in Compositing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121181","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121181","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121181","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121181","date":"2026-11-07","epss":0.0037,"percentile":0.31068}],"risk":0.30155000000000004,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/567936269"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121181","description":"Use after free in Editing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121201","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121201","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121201","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121201","date":"2026-11-07","epss":0.0037,"percentile":0.31068}],"risk":0.30155000000000004,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/574193110"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121201","description":"Use after free in Animation in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121061","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121061","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121061","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121061","date":"2026-11-07","epss":0.0037,"percentile":0.31067}],"risk":0.30155000000000004,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/576723181"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121061","description":"Use after free in Modularization in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121100","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121100","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121100","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121100","date":"2026-11-07","epss":0.0037,"percentile":0.31067}],"risk":0.30155000000000004,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/570796613"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121100","description":"Use after free in DOM in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121182","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121182","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121182","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121182","date":"2026-11-07","epss":0.0037,"percentile":0.31067}],"risk":0.30155000000000004,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/576169244"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121182","description":"Use after free in DOM in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121238","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121238","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121238","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121238","date":"2026-11-07","epss":0.0037,"percentile":0.31067}],"risk":0.30155000000000004,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/569659190"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121238","description":"Use after free in Source in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121070","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121070","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121070","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121070","date":"2026-11-07","epss":0.0037,"percentile":0.31066}],"risk":0.30155000000000004,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/567611695"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121070","description":"Use after free in WTF in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121188","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121188","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121188","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121188","date":"2026-11-07","epss":0.0037,"percentile":0.31066}],"risk":0.30155000000000004,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/566506819"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121188","description":"Use after free in PerformanceAPIs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121203","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121203","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121203","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121203","date":"2026-11-07","epss":0.0037,"percentile":0.31066}],"risk":0.30155000000000004,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/571065824"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121203","description":"Use after free in Geometry in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121208","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121208","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121208","cwe":"CWE-125","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121208","date":"2026-11-07","epss":0.0037,"percentile":0.31066}],"risk":0.30155000000000004,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/577402416"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121208","description":"Out of bounds read in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121097","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121097","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121097","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121097","date":"2026-11-07","epss":0.0037,"percentile":0.31065}],"risk":0.30155000000000004,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/574409275"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121097","description":"Use after free in Printing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121117","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121117","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121117","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121117","date":"2026-11-07","epss":0.0037,"percentile":0.31065}],"risk":0.30155000000000004,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/575318807"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121117","description":"Use after free in Paint in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121128","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121128","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121128","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121128","date":"2026-11-07","epss":0.0037,"percentile":0.31065}],"risk":0.30155000000000004,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/568988525"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121128","description":"Use after free in Scheduling in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121168","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121168","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121168","cwe":"CWE-668","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121168","date":"2026-11-07","epss":0.0037,"percentile":0.31065}],"risk":0.30155000000000004,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/553161888"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121168","description":"Improper resource exposure in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121036","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121036","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121036","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121036","date":"2026-11-07","epss":0.0037,"percentile":0.31064}],"risk":0.30155000000000004,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/577378379"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121036","description":"Use after free in CSS in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121118","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121118","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121118","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121118","date":"2026-11-07","epss":0.0037,"percentile":0.31064}],"risk":0.30155000000000004,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/566377255"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121118","description":"Use after free in SVG in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121119","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121119","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121119","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121119","date":"2026-11-07","epss":0.0037,"percentile":0.31064}],"risk":0.30155000000000004,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/578691880"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121119","description":"Use after free in Controls in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121123","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121123","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121123","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121123","date":"2026-11-07","epss":0.0037,"percentile":0.31064}],"risk":0.30155000000000004,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/576097084"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121123","description":"Use after free in Canvas in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113200","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113200","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113200","cwe":"CWE-908","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113200","date":"2026-11-07","epss":0.00368,"percentile":0.308}],"risk":0.2999200000000001,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/563350676"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113200","description":"Uninitialized resource in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113130","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113130","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113130","cwe":"CWE-863","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113130","date":"2026-11-07","epss":0.00365,"percentile":0.3051}],"risk":0.29747500000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/563004214"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113130","description":"Incorrect authorization in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113132","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113132","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113132","cwe":"CWE-863","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113132","date":"2026-11-07","epss":0.00365,"percentile":0.3051}],"risk":0.29747500000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562953023"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113132","description":"Incorrect authorization in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113281","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113281","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113281","cwe":"CWE-862","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113281","date":"2026-11-07","epss":0.00364,"percentile":0.30477}],"risk":0.29666000000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/498742883"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113281","description":"Missing authorization in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113107","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113107","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113107","cwe":"CWE-862","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113107","date":"2026-11-07","epss":0.00364,"percentile":0.30394}],"risk":0.29666000000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/559776445"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113107","description":"Missing authorization in Media in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113268","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113268","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113268","cwe":"CWE-200","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113268","date":"2026-11-07","epss":0.00363,"percentile":0.30296}],"risk":0.295845,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553661952"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113268","description":"Information leak in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113249","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113249","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113249","cwe":"CWE-862","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113249","date":"2026-11-07","epss":0.00361,"percentile":0.30141}],"risk":0.294215,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/513480110"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113249","description":"Missing authorization in Mobile in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-119261","versionConstraint":"< 156.0.8078.79 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-119261","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119261","cwe":"CWE-122","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-119261","date":"2026-11-07","epss":0.00316,"percentile":0.24636}],"risk":0.29388,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02107719452.html","https://issues.chromium.org/issues/574213633"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119261","description":"Buffer overflow in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121124","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121124","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121124","cwe":"CWE-710","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121124","date":"2026-11-07","epss":0.00359,"percentile":0.29864}],"risk":0.29258500000000004,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/566313798"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121124","description":"Improper adherence to coding standards in XML in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121184","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121184","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121184","cwe":"CWE-125","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121184","date":"2026-11-07","epss":0.00359,"percentile":0.29864}],"risk":0.29258500000000004,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/565681451"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121184","description":"Out of bounds read in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113018","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113018","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113018","cwe":"CWE-862","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113018","date":"2026-11-07","epss":0.00359,"percentile":0.29851}],"risk":0.29258500000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/497072295"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113018","description":"Missing authorization in IME in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113214","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113214","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113214","cwe":"CWE-863","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113214","date":"2026-11-07","epss":0.00359,"percentile":0.29851}],"risk":0.29258500000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/506148052"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113214","description":"Incorrect authorization in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-118358","versionConstraint":"< 156.0.8078.73 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-118358","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118358","cwe":"CWE-416","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-118358","date":"2026-11-07","epss":0.00358,"percentile":0.29696}],"risk":0.29177000000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html","https://issues.chromium.org/issues/572191610"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-118358","description":"Use after free in WebAudio in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-112996","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-112996","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112996","cwe":"CWE-863","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-112996","date":"2026-11-07","epss":0.00357,"percentile":0.29666}],"risk":0.29095499999999996,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/563015686"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112996","description":"Incorrect authorization in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113001","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113001","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113001","cwe":"CWE-863","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113001","date":"2026-11-07","epss":0.00357,"percentile":0.29665}],"risk":0.29095499999999996,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553144392"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113001","description":"Incorrect authorization in Workers in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113110","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113110","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113110","cwe":"CWE-862","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113110","date":"2026-11-07","epss":0.00357,"percentile":0.29665}],"risk":0.29095499999999996,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553390794"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113110","description":"Missing authorization in ShadowDOM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113127","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113127","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113127","cwe":"CWE-441","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113127","date":"2026-11-07","epss":0.00357,"percentile":0.29665}],"risk":0.29095499999999996,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/501730091"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113127","description":"Confused deputy in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-112993","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-112993","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112993","cwe":"CWE-862","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-112993","date":"2026-11-07","epss":0.00357,"percentile":0.29664}],"risk":0.29095499999999996,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/572893186"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112993","description":"Missing authorization in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113058","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113058","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113058","cwe":"CWE-862","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113058","date":"2026-11-07","epss":0.00357,"percentile":0.29664}],"risk":0.29095499999999996,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/551059870"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113058","description":"Missing authorization in WebUI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121257","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121257","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121257","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121257","date":"2026-11-07","epss":0.00312,"percentile":0.24263}],"risk":0.29016,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/567672825"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121257","description":"Use after free in TabStrip in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121250","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121250","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121250","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121250","date":"2026-11-07","epss":0.00312,"percentile":0.24221}],"risk":0.29016,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/572991399"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121250","description":"Use after free in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113121","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113121","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113121","cwe":"CWE-672","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113121","date":"2026-11-07","epss":0.00356,"percentile":0.29566}],"risk":0.29014,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562909956"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113121","description":"Use of released resource in ContextMenu in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113179","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113179","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113179","cwe":"CWE-862","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113179","date":"2026-11-07","epss":0.00356,"percentile":0.29543}],"risk":0.29014,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/572695599"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113179","description":"Missing authorization in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113172","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113172","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113172","cwe":"CWE-862","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113172","date":"2026-11-07","epss":0.00356,"percentile":0.29542}],"risk":0.29014,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/515451922"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113172","description":"Missing authorization in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113184","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113184","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113184","cwe":"CWE-862","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113184","date":"2026-11-07","epss":0.00356,"percentile":0.29542}],"risk":0.29014,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/540068924"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113184","description":"Missing authorization in Scheduling in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113198","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113198","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113198","cwe":"CWE-862","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113198","date":"2026-11-07","epss":0.00356,"percentile":0.29542}],"risk":0.29014,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/498861195"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113198","description":"Missing authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113244","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113244","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113244","cwe":"CWE-862","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113244","date":"2026-11-07","epss":0.00356,"percentile":0.29541}],"risk":0.29014,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/514078112"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113244","description":"Missing authorization in UI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113327","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113327","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113327","cwe":"CWE-862","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113327","date":"2026-11-07","epss":0.00356,"percentile":0.29541}],"risk":0.29014,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/513417142"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113327","description":"Missing authorization in Chromecast in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113241","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113241","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113241","cwe":"CWE-451","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113241","date":"2026-11-07","epss":0.00356,"percentile":0.29478}],"risk":0.29014,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/514078082"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113241","description":"UI misrepresentation in Toolbar in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113291","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113291","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113291","cwe":"CWE-451","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113291","date":"2026-11-07","epss":0.00355,"percentile":0.29443}],"risk":0.28932500000000005,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/514008724"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113291","description":"UI misrepresentation in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113260","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113260","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113260","cwe":"CWE-754","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113260","date":"2026-11-07","epss":0.00355,"percentile":0.29442}],"risk":0.28932500000000005,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553326035"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113260","description":"Improper state validation in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113288","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113288","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113288","cwe":"CWE-200","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113288","date":"2026-11-07","epss":0.00355,"percentile":0.29442}],"risk":0.28932500000000005,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/556213889"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113288","description":"Information leak in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"d690b425b757db47","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64833","versionConstraint":">= 0.7.1, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64833","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":4.3,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64833","cwe":"CWE-125","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64833","date":"2026-11-07","epss":0.00396,"percentile":0.34019}],"risk":0.28908,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64833","description":"FFmpeg versions 0.7.1 through 8.1.2 contain an out-of-bounds read vulnerability in the S/PDIF muxer that allows attackers to access memory beyond buffer boundaries by supplying a crafted DTS stream with a core_size value larger than the actual packet length. Attackers can exploit the missing bounds check in the spdif_header_dts4 function by providing a malicious DTS-HD audio stream during S/PDIF re-muxing to trigger unauthorized memory reads beyond the packet buffer."},"relatedVulnerabilities":[]},{"artifact":{"id":"243e974ceb6a5245","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64833","versionConstraint":">= 0.7.1, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64833","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":4.3,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64833","cwe":"CWE-125","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64833","date":"2026-11-07","epss":0.00396,"percentile":0.34019}],"risk":0.28908,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64833","description":"FFmpeg versions 0.7.1 through 8.1.2 contain an out-of-bounds read vulnerability in the S/PDIF muxer that allows attackers to access memory beyond buffer boundaries by supplying a crafted DTS stream with a core_size value larger than the actual packet length. Attackers can exploit the missing bounds check in the spdif_header_dts4 function by providing a malicious DTS-HD audio stream during S/PDIF re-muxing to trigger unauthorized memory reads beyond the packet buffer."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6896ca1d5ee5394","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64833","versionConstraint":">= 0.7.1, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64833","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":4.3,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64833","cwe":"CWE-125","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64833","date":"2026-11-07","epss":0.00396,"percentile":0.34019}],"risk":0.28908,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64833","description":"FFmpeg versions 0.7.1 through 8.1.2 contain an out-of-bounds read vulnerability in the S/PDIF muxer that allows attackers to access memory beyond buffer boundaries by supplying a crafted DTS stream with a core_size value larger than the actual packet length. Attackers can exploit the missing bounds check in the spdif_header_dts4 function by providing a malicious DTS-HD audio stream during S/PDIF re-muxing to trigger unauthorized memory reads beyond the packet buffer."},"relatedVulnerabilities":[]},{"artifact":{"id":"1c27d303595909ee","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64833","versionConstraint":">= 0.7.1, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64833","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":4.3,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64833","cwe":"CWE-125","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64833","date":"2026-11-07","epss":0.00396,"percentile":0.34019}],"risk":0.28908,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64833","description":"FFmpeg versions 0.7.1 through 8.1.2 contain an out-of-bounds read vulnerability in the S/PDIF muxer that allows attackers to access memory beyond buffer boundaries by supplying a crafted DTS stream with a core_size value larger than the actual packet length. Attackers can exploit the missing bounds check in the spdif_header_dts4 function by providing a malicious DTS-HD audio stream during S/PDIF re-muxing to trigger unauthorized memory reads beyond the packet buffer."},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-118329","versionConstraint":"< 156.0.8078.73 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-118329","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118329","cwe":"CWE-908","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-118329","date":"2026-11-07","epss":0.00353,"percentile":0.29156}],"risk":0.28769500000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html","https://issues.chromium.org/issues/568900535"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-118329","description":"Uninitialized resource in ANGLE in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121113","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121113","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121113","cwe":"CWE-122","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121113","date":"2026-11-07","epss":0.00353,"percentile":0.29102}],"risk":0.28769500000000003,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/567106301"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121113","description":"Buffer overflow in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113084","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113084","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113084","cwe":"CWE-863","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113084","date":"2026-11-07","epss":0.00309,"percentile":0.23918}],"risk":0.28737,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/518099505"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113084","description":"Incorrect authorization in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113225","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113225","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113225","cwe":"CWE-416","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113225","date":"2026-11-07","epss":0.00499,"percentile":0.4304}],"risk":0.28692499999999993,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562109703"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113225","description":"Use after free in Browser in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113306","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113306","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113306","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113306","date":"2026-11-07","epss":0.00351,"percentile":0.28981}],"risk":0.286065,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/524695296"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113306","description":"Improper input validation in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web origin policy into a privileged page via a crafted file. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113094","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113094","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113094","cwe":"CWE-841","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113094","date":"2026-11-07","epss":0.00351,"percentile":0.28951}],"risk":0.286065,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/497494634"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113094","description":"Inappropriate implementation in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113111","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113111","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113111","cwe":"CWE-20","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113111","date":"2026-11-07","epss":0.00351,"percentile":0.28951}],"risk":0.286065,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/563163857"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113111","description":"Improper input validation in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113071","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113071","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113071","cwe":"CWE-330","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113071","date":"2026-11-07","epss":0.00351,"percentile":0.28944}],"risk":0.286065,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/514079212"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113071","description":"Use of insufficiently random values in Notifications in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-118308","versionConstraint":"< 156.0.8078.73 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-118308","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118308","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-118308","date":"2026-11-07","epss":0.00307,"percentile":0.23688}],"risk":0.28551,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html","https://issues.chromium.org/issues/574791952"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-118308","description":"Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121179","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121179","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121179","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121179","date":"2026-11-07","epss":0.0035,"percentile":0.28865}],"risk":0.28525000000000006,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/567936263"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121179","description":"Use after free in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113245","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113245","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113245","cwe":"CWE-862","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113245","date":"2026-11-07","epss":0.0035,"percentile":0.28863}],"risk":0.28525000000000006,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/532985249"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113245","description":"Missing authorization in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121112","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121112","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121112","cwe":"CWE-125","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121112","date":"2026-11-07","epss":0.00361,"percentile":0.30114}],"risk":0.28519,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/40063728"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121112","description":"Out of bounds read in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121178","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121178","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121178","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121178","date":"2026-11-07","epss":0.00361,"percentile":0.30114}],"risk":0.28519,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/570029317"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121178","description":"Use after free in Aura in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121140","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121140","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121140","cwe":"CWE-125","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121140","date":"2026-11-07","epss":0.00361,"percentile":0.30113}],"risk":0.28519,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/557605839"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121140","description":"Out of bounds read in Internals in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113254","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113254","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113254","cwe":"CWE-863","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113254","date":"2026-11-07","epss":0.00349,"percentile":0.28729}],"risk":0.28443500000000005,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562955705"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113254","description":"Incorrect authorization in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113000","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113000","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113000","cwe":"CWE-200","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113000","date":"2026-11-07","epss":0.00348,"percentile":0.28626}],"risk":0.28362,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/572598342"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113000","description":"Information leak in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113068","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113068","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113068","cwe":"CWE-451","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113068","date":"2026-11-07","epss":0.00348,"percentile":0.28626}],"risk":0.28362,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/40942045"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113068","description":"UI misrepresentation in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113124","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113124","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113124","cwe":"CWE-20","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113124","date":"2026-11-07","epss":0.00348,"percentile":0.28626}],"risk":0.28362,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553150456"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113124","description":"Improper input validation in DataTransfer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-112997","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-112997","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112997","cwe":"CWE-200","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-112997","date":"2026-11-07","epss":0.00348,"percentile":0.28625}],"risk":0.28362,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/560664595"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112997","description":"Information leak in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113117","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113117","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113117","cwe":"CWE-125","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113117","date":"2026-11-07","epss":0.00348,"percentile":0.28625}],"risk":0.28362,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/563788518"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113117","description":"Out of bounds read in ANGLE in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113173","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113173","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113173","cwe":"CWE-451","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113173","date":"2026-11-07","epss":0.00348,"percentile":0.28625}],"risk":0.28362,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553274389"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113173","description":"UI misrepresentation in UI in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113292","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113292","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113292","cwe":"CWE-451","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113292","date":"2026-11-07","epss":0.00348,"percentile":0.28625}],"risk":0.28362,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553248404"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113292","description":"UI misrepresentation in Omnibox in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113149","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113149","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113149","cwe":"CWE-451","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113149","date":"2026-11-07","epss":0.00348,"percentile":0.28624}],"risk":0.28362,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/517221283"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113149","description":"UI misrepresentation in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113226","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113226","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113226","cwe":"CWE-451","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113226","date":"2026-11-07","epss":0.00348,"percentile":0.28624}],"risk":0.28362,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/523248913"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113226","description":"UI misrepresentation in Model in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113230","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113230","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113230","cwe":"CWE-451","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113230","date":"2026-11-07","epss":0.00348,"percentile":0.28624}],"risk":0.28362,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553153823"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113230","description":"UI misrepresentation in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113049","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113049","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113049","cwe":"CWE-200","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113049","date":"2026-11-07","epss":0.00348,"percentile":0.28623}],"risk":0.28362,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/537465180"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113049","description":"Information leak in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113079","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113079","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113079","cwe":"CWE-451","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113079","date":"2026-11-07","epss":0.00348,"percentile":0.28623}],"risk":0.28362,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/40055319"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113079","description":"UI misrepresentation in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to spoof address bar via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113216","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113216","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113216","cwe":"CWE-672","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113216","date":"2026-11-07","epss":0.00346,"percentile":0.28313}],"risk":0.28199,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/556899544"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113216","description":"Use of released resource in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113227","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113227","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113227","cwe":"CWE-862","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113227","date":"2026-11-07","epss":0.00345,"percentile":0.28258}],"risk":0.281175,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/563021080"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113227","description":"Missing authorization in Editing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113287","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113287","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113287","cwe":"CWE-863","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113287","date":"2026-11-07","epss":0.00345,"percentile":0.28197}],"risk":0.281175,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562945664"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113287","description":"Incorrect authorization in Prompts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113256","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113256","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113256","cwe":"CWE-269","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113256","date":"2026-11-07","epss":0.00345,"percentile":0.28196}],"risk":0.281175,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/498748871"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113256","description":"Improper privilege management in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113265","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113265","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113265","cwe":"CWE-862","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113265","date":"2026-11-07","epss":0.00345,"percentile":0.28196}],"risk":0.281175,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/520017400"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113265","description":"Missing authorization in BFCache in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113290","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113290","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113290","cwe":"CWE-862","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113290","date":"2026-11-07","epss":0.00345,"percentile":0.28196}],"risk":0.281175,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/506152584"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113290","description":"Missing authorization in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113286","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113286","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113286","cwe":"CWE-862","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113286","date":"2026-11-07","epss":0.00342,"percentile":0.27891}],"risk":0.27873,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/563183231"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113286","description":"Missing authorization in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113289","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113289","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113289","cwe":"CWE-863","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113289","date":"2026-11-07","epss":0.00342,"percentile":0.27891}],"risk":0.27873,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/511311494"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113289","description":"Incorrect authorization in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113187","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113187","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113187","cwe":"CWE-862","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113187","date":"2026-11-07","epss":0.00342,"percentile":0.2789}],"risk":0.27873,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553845833"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113187","description":"Missing authorization in DOM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113307","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113307","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113307","cwe":"CWE-451","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113307","date":"2026-11-07","epss":0.00341,"percentile":0.27813}],"risk":0.277915,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/514066180"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113307","description":"UI misrepresentation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted Chrome extension. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-118331","versionConstraint":"< 156.0.8078.73 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-118331","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118331","cwe":"CWE-416","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-118331","date":"2026-11-07","epss":0.0034,"percentile":0.27649}],"risk":0.2771,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html","https://issues.chromium.org/issues/572193211"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-118331","description":"Use after free in FileAPI in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-118344","versionConstraint":"< 156.0.8078.73 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-118344","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118344","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-118344","date":"2026-11-07","epss":0.0034,"percentile":0.27649}],"risk":0.2771,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html","https://issues.chromium.org/issues/574852698"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-118344","description":"Use after free in Layout in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-118348","versionConstraint":"< 156.0.8078.73 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-118348","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118348","cwe":"CWE-190","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-118348","date":"2026-11-07","epss":0.0034,"percentile":0.27649}],"risk":0.2771,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html","https://issues.chromium.org/issues/574776938"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-118348","description":"Integer overflow in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113251","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113251","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113251","cwe":"CWE-20","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113251","date":"2026-11-07","epss":0.0034,"percentile":0.27596}],"risk":0.2771,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/40056239"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113251","description":"Improper input validation in PDF in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113006","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113006","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113006","cwe":"CWE-863","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113006","date":"2026-11-07","epss":0.00338,"percentile":0.27391}],"risk":0.27547000000000005,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/496650333"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113006","description":"Incorrect authorization in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113153","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113153","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113153","cwe":"CWE-862","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113153","date":"2026-11-07","epss":0.00338,"percentile":0.27391}],"risk":0.27547000000000005,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/561099700"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113153","description":"Missing authorization in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113005","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113005","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113005","cwe":"CWE-862","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113005","date":"2026-11-07","epss":0.00338,"percentile":0.2739}],"risk":0.27547000000000005,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/503584859"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113005","description":"Missing authorization in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113105","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113105","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113105","cwe":"CWE-863","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113105","date":"2026-11-07","epss":0.00338,"percentile":0.2739}],"risk":0.27547000000000005,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/501805751"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113105","description":"Incorrect authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113155","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113155","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113155","cwe":"CWE-862","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113155","date":"2026-11-07","epss":0.00338,"percentile":0.2739}],"risk":0.27547000000000005,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/505994167"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113155","description":"Missing authorization in Glic in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113207","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113207","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113207","cwe":"CWE-863","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113207","date":"2026-11-07","epss":0.00338,"percentile":0.2739}],"risk":0.27547000000000005,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/511806651"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113207","description":"Incorrect authorization in SiteIsolation in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113097","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113097","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113097","cwe":"CWE-862","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113097","date":"2026-11-07","epss":0.00338,"percentile":0.27389}],"risk":0.27547000000000005,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/526039697"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113097","description":"Missing authorization in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113114","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113114","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113114","cwe":"CWE-863","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113114","date":"2026-11-07","epss":0.00338,"percentile":0.27389}],"risk":0.27547000000000005,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/497087197"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113114","description":"Incorrect authorization in SignIn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121183","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121183","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121183","cwe":"CWE-863","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121183","date":"2026-11-07","epss":0.00348,"percentile":0.28561}],"risk":0.27492000000000005,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/550245671"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121183","description":"Incorrect authorization in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113203","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113203","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113203","cwe":"CWE-203","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113203","date":"2026-11-07","epss":0.00337,"percentile":0.27262}],"risk":0.27465500000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562230438"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113203","description":"Observable discrepancy in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113152","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113152","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113152","cwe":"CWE-441","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113152","date":"2026-11-07","epss":0.00337,"percentile":0.2723}],"risk":0.27465500000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/523264945"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113152","description":"Confused deputy in SignIn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-118332","versionConstraint":"< 156.0.8078.73 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-118332","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118332","cwe":"CWE-416","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-118332","date":"2026-11-07","epss":0.00295,"percentile":0.22282}],"risk":0.27435,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html","https://issues.chromium.org/issues/574030524"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-118332","description":"Use after free in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-118355","versionConstraint":"< 156.0.8078.73 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-118355","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118355","cwe":"CWE-416","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-118355","date":"2026-11-07","epss":0.00295,"percentile":0.22282}],"risk":0.27435,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html","https://issues.chromium.org/issues/570638833"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-118355","description":"Use after free in Command in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-118316","versionConstraint":"< 156.0.8078.73 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-118316","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118316","cwe":"CWE-416","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-118316","date":"2026-11-07","epss":0.00295,"percentile":0.22281}],"risk":0.27435,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html","https://issues.chromium.org/issues/574223268"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-118316","description":"Use after free in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-118342","versionConstraint":"< 156.0.8078.73 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-118342","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118342","cwe":"CWE-416","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-118342","date":"2026-11-07","epss":0.00295,"percentile":0.22281}],"risk":0.27435,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html","https://issues.chromium.org/issues/574412629"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-118342","description":"Use after free in Editing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113092","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113092","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113092","cwe":"CWE-862","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113092","date":"2026-11-07","epss":0.00336,"percentile":0.27135}],"risk":0.27384000000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/558377544"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113092","description":"Missing authorization in Passwords in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"ae6ee624d460a6ba","cpes":["cpe:2.3:a:OpenPrinting:cups-libs:2.4.20-r1:*:*:*:*:*:*:*","cpe:2.3:a:OpenPrinting:cups_libs:2.4.20-r1:*:*:*:*:*:*:*","cpe:2.3:a:cups-libs:cups-libs:2.4.20-r1:*:*:*:*:*:*:*","cpe:2.3:a:cups-libs:cups_libs:2.4.20-r1:*:*:*:*:*:*:*","cpe:2.3:a:cups_libs:cups-libs:2.4.20-r1:*:*:*:*:*:*:*","cpe:2.3:a:cups_libs:cups_libs:2.4.20-r1:*:*:*:*:*:*:*","cpe:2.3:a:cups:cups-libs:2.4.20-r1:*:*:*:*:*:*:*","cpe:2.3:a:cups:cups_libs:2.4.20-r1:*:*:*:*:*:*:*"],"name":"cups-libs","purl":"pkg:apk/alpine/cups-libs@2.4.20-r1?arch=x86_64&distro=alpine-3.24.3&upstream=cups","type":"apk","version":"2.4.20-r1","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcups.so.2"},{"path":"/usr/lib/libcupsimage.so.2"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"cups"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:cups:cups:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2018-6553","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:cups:cups:2.4.20:*:*:*:*:*:*:*"],"package":{"name":"cups","version":"2.4.20-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2018-6553","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":6.1,"exploitabilityScore":2.1},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":4.6,"impactScore":6.5,"exploitabilityScore":4},"version":"2.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2018-6553","date":"2026-11-07","epss":0.00385,"percentile":0.32773}],"risk":0.27335,"urls":["https://lists.debian.org/debian-lts-announce/2018/07/msg00014.html","https://security.gentoo.org/glsa/201908-08","https://usn.ubuntu.com/usn/usn-3713-1","https://www.debian.org/security/2018/dsa-4243"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-6553","description":"The CUPS AppArmor profile incorrectly confined the dnssd backend due to use of hard links. A local attacker could possibly use this issue to escape confinement. This flaw affects versions prior to 2.2.7-1ubuntu2.1 in Ubuntu 18.04 LTS, prior to 2.2.4-7ubuntu3.1 in Ubuntu 17.10, prior to 2.1.3-4ubuntu0.5 in Ubuntu 16.04 LTS, and prior to 1.7.2-0ubuntu1.10 in Ubuntu 14.04 LTS."},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113131","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113131","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113131","cwe":"CWE-863","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113131","date":"2026-11-07","epss":0.00335,"percentile":0.27073}],"risk":0.2730250000000001,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/500536121"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113131","description":"Incorrect authorization in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113266","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113266","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113266","cwe":"CWE-125","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113266","date":"2026-11-07","epss":0.00334,"percentile":0.2697}],"risk":0.27221,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/561499641"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113266","description":"Out of bounds read in ANGLE in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-112994","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-112994","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112994","cwe":"CWE-451","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-112994","date":"2026-11-07","epss":0.00334,"percentile":0.26925}],"risk":0.27221,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562962437"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112994","description":"UI misrepresentation in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113128","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113128","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113128","cwe":"CWE-200","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113128","date":"2026-11-07","epss":0.00334,"percentile":0.26925}],"risk":0.27221,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/537109293"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113128","description":"Information leak in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-112995","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-112995","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112995","cwe":"CWE-203","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-112995","date":"2026-11-07","epss":0.00334,"percentile":0.26924}],"risk":0.27221,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/514447367"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112995","description":"Observable discrepancy in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113009","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113009","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113009","cwe":"CWE-451","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113009","date":"2026-11-07","epss":0.00334,"percentile":0.26924}],"risk":0.27221,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/514066540"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113009","description":"UI misrepresentation in WindowControlsOverlay in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to potentially spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"d690b425b757db47","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64832","versionConstraint":">= 4.4, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64832","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64832","cwe":"CWE-415","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64832","date":"2026-11-07","epss":0.00335,"percentile":0.26997}],"risk":0.27218749999999997,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664","https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64832","description":"FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC hardware decoder within libavcodec/nvdec.c that allows attackers to trigger memory corruption by supplying a crafted video file. When no decoder surfaces remain, the ff_nvdec_start_frame_sep_ref error path frees memory via nvdec_fdd_priv_free while the calling layer subsequently frees the same frame description data, resulting in a double-free of the underlying decoder context in any FFmpeg-based application using NVDEC hardware-accelerated decoding."},"relatedVulnerabilities":[]},{"artifact":{"id":"243e974ceb6a5245","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64832","versionConstraint":">= 4.4, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64832","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64832","cwe":"CWE-415","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64832","date":"2026-11-07","epss":0.00335,"percentile":0.26997}],"risk":0.27218749999999997,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664","https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64832","description":"FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC hardware decoder within libavcodec/nvdec.c that allows attackers to trigger memory corruption by supplying a crafted video file. When no decoder surfaces remain, the ff_nvdec_start_frame_sep_ref error path frees memory via nvdec_fdd_priv_free while the calling layer subsequently frees the same frame description data, resulting in a double-free of the underlying decoder context in any FFmpeg-based application using NVDEC hardware-accelerated decoding."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6896ca1d5ee5394","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64832","versionConstraint":">= 4.4, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64832","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64832","cwe":"CWE-415","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64832","date":"2026-11-07","epss":0.00335,"percentile":0.26997}],"risk":0.27218749999999997,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664","https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64832","description":"FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC hardware decoder within libavcodec/nvdec.c that allows attackers to trigger memory corruption by supplying a crafted video file. When no decoder surfaces remain, the ff_nvdec_start_frame_sep_ref error path frees memory via nvdec_fdd_priv_free while the calling layer subsequently frees the same frame description data, resulting in a double-free of the underlying decoder context in any FFmpeg-based application using NVDEC hardware-accelerated decoding."},"relatedVulnerabilities":[]},{"artifact":{"id":"1c27d303595909ee","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64832","versionConstraint":">= 4.4, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64832","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64832","cwe":"CWE-415","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64832","date":"2026-11-07","epss":0.00335,"percentile":0.26997}],"risk":0.27218749999999997,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664","https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64832","description":"FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC hardware decoder within libavcodec/nvdec.c that allows attackers to trigger memory corruption by supplying a crafted video file. When no decoder surfaces remain, the ff_nvdec_start_frame_sep_ref error path frees memory via nvdec_fdd_priv_free while the calling layer subsequently frees the same frame description data, resulting in a double-free of the underlying decoder context in any FFmpeg-based application using NVDEC hardware-accelerated decoding."},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113052","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113052","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113052","cwe":"CWE-362","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113052","date":"2026-11-07","epss":0.00333,"percentile":0.26684}],"risk":0.271395,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/564326756"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113052","description":"Race condition in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113233","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113233","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113233","cwe":"CWE-367","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113233","date":"2026-11-07","epss":0.00333,"percentile":0.26684}],"risk":0.271395,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562111801"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113233","description":"Race condition in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113190","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113190","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113190","cwe":"CWE-441","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113190","date":"2026-11-07","epss":0.00332,"percentile":0.26566}],"risk":0.27058000000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/514372708"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113190","description":"Confused deputy in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121224","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121224","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121224","cwe":"CWE-59","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121224","date":"2026-11-07","epss":0.00346,"percentile":0.28339}],"risk":0.26988,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/574922421"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121224","description":"Security issue in Desktop in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113061","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113061","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113061","cwe":"CWE-20","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113061","date":"2026-11-07","epss":0.00331,"percentile":0.26405}],"risk":0.26976500000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/554557866"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113061","description":"Improper input validation in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"3aecfe6abdd64de9","cpes":["cpe:2.3:a:klauspost:compress:v1.18.7:*:*:*:*:*:*:*"],"name":"github.com/klauspost/compress","purl":"pkg:golang/github.com/klauspost/compress@v1.18.7","type":"go-module","version":"v1.18.7","language":"go","licenses":[],"metadata":{"h1Digest":"h1:aUyZsS4kH3QTKurYhAOwAHxllVPnOthb3vPfnF1Ehjw=","mainModule":"k6","architecture":"amd64","goCompiledVersion":"go1.26.10"},"locations":[{"path":"/usr/libexec/sm-k6/k6-v1","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/usr/libexec/sm-k6/k6-v1","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.20.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6865","versionConstraint":"<1.20.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"github.com/klauspost/compress","version":"v1.18.7"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6865","fix":{"state":"fixed","versions":["1.20.2"],"available":[{"date":"2026-10-12","kind":"release","version":"1.20.2"}]},"cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116591","cwe":"CWE-190","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-116591","date":"2026-11-07","epss":0.00333,"percentile":0.26636}],"risk":0.26972999999999997,"urls":["https://github.com/klauspost/compress/commit/7f5d8528720c895a6106f201719f87eb030a565d","https://github.com/klauspost/compress/releases/tag/v1.20.2"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://github.com/klauspost/compress/security/advisories/GHSA-fpmh-frq8-7rj8","description":"Panic on two-block frames in github.com/klauspost/compress"},"relatedVulnerabilities":[{"id":"CVE-2026-116591","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116591","cwe":"CWE-190","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-116591","date":"2026-11-07","epss":0.00333,"percentile":0.26636}],"urls":["https://github.com/klauspost/compress/commit/7f5d8528720c895a6106f201719f87eb030a565d","https://github.com/klauspost/compress/releases/tag/v1.20.2","https://github.com/klauspost/compress/security/advisories/GHSA-fpmh-frq8-7rj8"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116591","description":"compress provides various compression algorithms. Prior to 1.20.2, the zstd DecodeAll and streaming decoder paths can panic when a crafted two-block frame reaches huff0.ReadTable with an FSE normalized count of 32768 that readNCount stores in int16 as -32768. The wrapped count allows buildDtable to retain stale fse.Scratch decode-table state from the prior block, and nextFast then derives an out-of-range state and indexes beyond the table instead of returning a decode error. Both blocks are required to preserve and then reuse the stale state, allowing untrusted zstd input to crash an application. This issue is fixed in version 1.20.2."},{"id":"GHSA-fpmh-frq8-7rj8","cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116591","cwe":"CWE-190","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-116591","date":"2026-11-07","epss":0.00333,"percentile":0.26636}],"urls":["https://github.com/klauspost/compress/security/advisories/GHSA-fpmh-frq8-7rj8","https://nvd.nist.gov/vuln/detail/CVE-2026-116591","https://github.com/klauspost/compress/commit/7f5d8528720c895a6106f201719f87eb030a565d","https://github.com/klauspost/compress/releases/tag/v1.20.2"],"severity":"High","namespace":"github:language:go","dataSource":"https://github.com/advisories/GHSA-fpmh-frq8-7rj8","description":"compress zstd: Panic on two-block frames"}]},{"artifact":{"id":"ed5f1bbe8f62b439","cpes":["cpe:2.3:a:klauspost:compress:v1.20.0:*:*:*:*:*:*:*"],"name":"github.com/klauspost/compress","purl":"pkg:golang/github.com/klauspost/compress@v1.20.0","type":"go-module","version":"v1.20.0","language":"go","licenses":[],"metadata":{"h1Digest":"h1:a3C1ke2ohxFymNlb2HWAHjDeKCI90scRskErZkR0ezA=","mainModule":"k6","architecture":"amd64","goCompiledVersion":"go1.26.10"},"locations":[{"path":"/usr/libexec/sm-k6/k6-v2","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/usr/libexec/sm-k6/k6-v2","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.20.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6865","versionConstraint":"<1.20.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"github.com/klauspost/compress","version":"v1.20.0"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6865","fix":{"state":"fixed","versions":["1.20.2"],"available":[{"date":"2026-10-12","kind":"release","version":"1.20.2"}]},"cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116591","cwe":"CWE-190","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-116591","date":"2026-11-07","epss":0.00333,"percentile":0.26636}],"risk":0.26972999999999997,"urls":["https://github.com/klauspost/compress/commit/7f5d8528720c895a6106f201719f87eb030a565d","https://github.com/klauspost/compress/releases/tag/v1.20.2"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://github.com/klauspost/compress/security/advisories/GHSA-fpmh-frq8-7rj8","description":"Panic on two-block frames in github.com/klauspost/compress"},"relatedVulnerabilities":[{"id":"CVE-2026-116591","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116591","cwe":"CWE-190","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-116591","date":"2026-11-07","epss":0.00333,"percentile":0.26636}],"urls":["https://github.com/klauspost/compress/commit/7f5d8528720c895a6106f201719f87eb030a565d","https://github.com/klauspost/compress/releases/tag/v1.20.2","https://github.com/klauspost/compress/security/advisories/GHSA-fpmh-frq8-7rj8"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116591","description":"compress provides various compression algorithms. Prior to 1.20.2, the zstd DecodeAll and streaming decoder paths can panic when a crafted two-block frame reaches huff0.ReadTable with an FSE normalized count of 32768 that readNCount stores in int16 as -32768. The wrapped count allows buildDtable to retain stale fse.Scratch decode-table state from the prior block, and nextFast then derives an out-of-range state and indexes beyond the table instead of returning a decode error. Both blocks are required to preserve and then reuse the stale state, allowing untrusted zstd input to crash an application. This issue is fixed in version 1.20.2."},{"id":"GHSA-fpmh-frq8-7rj8","cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116591","cwe":"CWE-190","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-116591","date":"2026-11-07","epss":0.00333,"percentile":0.26636}],"urls":["https://github.com/klauspost/compress/security/advisories/GHSA-fpmh-frq8-7rj8","https://nvd.nist.gov/vuln/detail/CVE-2026-116591","https://github.com/klauspost/compress/commit/7f5d8528720c895a6106f201719f87eb030a565d","https://github.com/klauspost/compress/releases/tag/v1.20.2"],"severity":"High","namespace":"github:language:go","dataSource":"https://github.com/advisories/GHSA-fpmh-frq8-7rj8","description":"compress zstd: Panic on two-block frames"}]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113022","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113022","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113022","cwe":"CWE-863","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113022","date":"2026-11-07","epss":0.0033,"percentile":0.26344}],"risk":0.26895,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/494352583"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113022","description":"Incorrect authorization in PDFium in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted PDF file. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-118307","versionConstraint":"< 156.0.8078.73 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-118307","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118307","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-118307","date":"2026-11-07","epss":0.0033,"percentile":0.26328}],"risk":0.26895,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html","https://issues.chromium.org/issues/570675085"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-118307","description":"Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113113","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113113","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113113","cwe":"CWE-863","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113113","date":"2026-11-07","epss":0.0033,"percentile":0.26286}],"risk":0.26895,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/495899355"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113113","description":"Incorrect authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113276","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113276","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113276","cwe":"CWE-862","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113276","date":"2026-11-07","epss":0.0033,"percentile":0.26248}],"risk":0.26895,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/517809727"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113276","description":"Missing authorization in Passwords in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113013","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113013","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113013","cwe":"CWE-863","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113013","date":"2026-11-07","epss":0.00329,"percentile":0.26163}],"risk":0.268135,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/563814519"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113013","description":"Incorrect authorization in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113185","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113185","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113185","cwe":"CWE-863","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113185","date":"2026-11-07","epss":0.00329,"percentile":0.26163}],"risk":0.268135,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/517461056"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113185","description":"Incorrect authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain sensitive information via a crafted Chrome extension. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113247","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113247","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113247","cwe":"CWE-441","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113247","date":"2026-11-07","epss":0.00329,"percentile":0.26163}],"risk":0.268135,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/514508203"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113247","description":"Confused deputy in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113321","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113321","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113321","cwe":"CWE-862","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113321","date":"2026-11-07","epss":0.00329,"percentile":0.26163}],"risk":0.268135,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/513521516"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113321","description":"Missing authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113302","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113302","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113302","cwe":"CWE-862","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113302","date":"2026-11-07","epss":0.00329,"percentile":0.26162}],"risk":0.268135,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/500491981"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113302","description":"Missing authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113193","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113193","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113193","cwe":"CWE-843","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113193","date":"2026-11-07","epss":0.00465,"percentile":0.40475}],"risk":0.267375,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/559932543"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113193","description":"Type confusion in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113080","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113080","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113080","cwe":"CWE-451","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113080","date":"2026-11-07","epss":0.00328,"percentile":0.26089}],"risk":0.26732,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/533135911"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113080","description":"UI misrepresentation in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to spoof address bar via a crafted Chrome extension. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113278","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113278","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113278","cwe":"CWE-451","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113278","date":"2026-11-07","epss":0.00328,"percentile":0.26038}],"risk":0.26732,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/514080341"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113278","description":"UI misrepresentation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome extension. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113219","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113219","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113219","cwe":"CWE-862","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113219","date":"2026-11-07","epss":0.00326,"percentile":0.25833}],"risk":0.26569000000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/503583985"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113219","description":"Missing authorization in Contacts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113158","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113158","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113158","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113158","date":"2026-11-07","epss":0.00325,"percentile":0.25739}],"risk":0.264875,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553157579"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113158","description":"Use after free in Streaming in Google Chrome prior to 156.0.8078.47 allowed an adjacent attacker to potentially execute arbitrary code inside the sandbox via crafted network traffic. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113264","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113264","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113264","cwe":"CWE-863","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113264","date":"2026-11-07","epss":0.00325,"percentile":0.25676}],"risk":0.264875,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/501786099"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113264","description":"Incorrect authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113177","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113177","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113177","cwe":"CWE-863","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113177","date":"2026-11-07","epss":0.00325,"percentile":0.25669}],"risk":0.264875,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/559795243"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113177","description":"Incorrect authorization in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113220","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113220","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113220","cwe":"CWE-862","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113220","date":"2026-11-07","epss":0.00324,"percentile":0.25626}],"risk":0.26405999999999996,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/501875966"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113220","description":"Missing authorization in Extensions in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113166","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113166","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113166","cwe":"CWE-20","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113166","date":"2026-11-07","epss":0.00324,"percentile":0.25615}],"risk":0.26405999999999996,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/504073211"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113166","description":"Improper input validation in History in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass system access restrictions into a privileged page via crafted network traffic. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113191","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113191","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113191","cwe":"CWE-451","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113191","date":"2026-11-07","epss":0.00324,"percentile":0.2556}],"risk":0.26405999999999996,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/441089142"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113191","description":"UI misrepresentation in Internals in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113036","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113036","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113036","cwe":"CWE-863","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113036","date":"2026-11-07","epss":0.00324,"percentile":0.25543}],"risk":0.26405999999999996,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553335083"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113036","description":"Incorrect authorization in HTML in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121166","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121166","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121166","cwe":"CWE-843","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121166","date":"2026-11-07","epss":0.00323,"percentile":0.25532}],"risk":0.263245,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/566111382"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121166","description":"Type confusion in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113146","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113146","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113146","cwe":"CWE-863","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113146","date":"2026-11-07","epss":0.00322,"percentile":0.25317}],"risk":0.26243000000000005,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/511325076"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113146","description":"Incorrect authorization in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113341","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113341","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113341","cwe":"CWE-416","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113341","date":"2026-11-07","epss":0.00455,"percentile":0.39683}],"risk":0.261625,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/569165786"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113341","description":"Use after free in Skia in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113004","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113004","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113004","cwe":"CWE-843","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113004","date":"2026-11-07","epss":0.00321,"percentile":0.25306}],"risk":0.26161500000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/513394775"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113004","description":"Type confusion in Sync in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory outside the sandbox via a crafted file. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113100","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113100","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113100","cwe":"CWE-457","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113100","date":"2026-11-07","epss":0.00321,"percentile":0.25306}],"risk":0.26161500000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/561787556"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113100","description":"Use of uninitialized variable in Audio in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted media file. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113067","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113067","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113067","cwe":"CWE-451","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113067","date":"2026-11-07","epss":0.00321,"percentile":0.25305}],"risk":0.26161500000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562999766"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113067","description":"UI misrepresentation in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113204","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113204","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113204","cwe":"CWE-451","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113204","date":"2026-11-07","epss":0.00319,"percentile":0.24972}],"risk":0.259985,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/544328873"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113204","description":"UI misrepresentation in TrustedWebActivities in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to spoof address bar via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113143","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113143","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113143","cwe":"CWE-908","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113143","date":"2026-11-07","epss":0.0037,"percentile":0.31114}],"risk":0.259925,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/563352451"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113143","description":"Uninitialized resource in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"d690b425b757db47","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-65703","versionConstraint":">= 2.7, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-65703","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-65703","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-65703","date":"2026-11-07","epss":0.00332,"percentile":0.26534}],"risk":0.25978999999999997,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/fd3ee52fab34d98a95b787d0b5ff45685766200c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23773","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-tdsc-video-decoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-65703","description":"FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video decoder that allows remote attackers to cause heap corruption by supplying a crafted AVI file that changes frame dimensions across TDSF frames. The tdsc_parse_tdsf() function fails to unreference the existing reference frame before calling av_frame_get_buffer(), causing tdsc_blit() and tdsc_yuv2rgb() to write attacker-controlled pixel data beyond the end of the undersized reference frame buffer, resulting in a process crash and potential code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"243e974ceb6a5245","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-65703","versionConstraint":">= 2.7, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-65703","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-65703","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-65703","date":"2026-11-07","epss":0.00332,"percentile":0.26534}],"risk":0.25978999999999997,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/fd3ee52fab34d98a95b787d0b5ff45685766200c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23773","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-tdsc-video-decoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-65703","description":"FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video decoder that allows remote attackers to cause heap corruption by supplying a crafted AVI file that changes frame dimensions across TDSF frames. The tdsc_parse_tdsf() function fails to unreference the existing reference frame before calling av_frame_get_buffer(), causing tdsc_blit() and tdsc_yuv2rgb() to write attacker-controlled pixel data beyond the end of the undersized reference frame buffer, resulting in a process crash and potential code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6896ca1d5ee5394","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-65703","versionConstraint":">= 2.7, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-65703","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-65703","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-65703","date":"2026-11-07","epss":0.00332,"percentile":0.26534}],"risk":0.25978999999999997,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/fd3ee52fab34d98a95b787d0b5ff45685766200c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23773","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-tdsc-video-decoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-65703","description":"FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video decoder that allows remote attackers to cause heap corruption by supplying a crafted AVI file that changes frame dimensions across TDSF frames. The tdsc_parse_tdsf() function fails to unreference the existing reference frame before calling av_frame_get_buffer(), causing tdsc_blit() and tdsc_yuv2rgb() to write attacker-controlled pixel data beyond the end of the undersized reference frame buffer, resulting in a process crash and potential code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"1c27d303595909ee","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-65703","versionConstraint":">= 2.7, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-65703","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-65703","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-65703","date":"2026-11-07","epss":0.00332,"percentile":0.26534}],"risk":0.25978999999999997,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/fd3ee52fab34d98a95b787d0b5ff45685766200c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23773","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-tdsc-video-decoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-65703","description":"FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video decoder that allows remote attackers to cause heap corruption by supplying a crafted AVI file that changes frame dimensions across TDSF frames. The tdsc_parse_tdsf() function fails to unreference the existing reference frame before calling av_frame_get_buffer(), causing tdsc_blit() and tdsc_yuv2rgb() to write attacker-controlled pixel data beyond the end of the undersized reference frame buffer, resulting in a process crash and potential code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113275","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113275","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113275","cwe":"CWE-862","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113275","date":"2026-11-07","epss":0.00318,"percentile":0.24927}],"risk":0.25917,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/502040109"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113275","description":"Missing authorization in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-118339","versionConstraint":"< 156.0.8078.73 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-118339","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118339","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-118339","date":"2026-11-07","epss":0.00317,"percentile":0.24787}],"risk":0.25835500000000006,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html","https://issues.chromium.org/issues/567645136"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-118339","description":"Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-118317","versionConstraint":"< 156.0.8078.73 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-118317","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118317","cwe":"CWE-416","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-118317","date":"2026-11-07","epss":0.00317,"percentile":0.24786}],"risk":0.25835500000000006,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html","https://issues.chromium.org/issues/568730797"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-118317","description":"Use after free in HTML in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113062","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113062","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113062","cwe":"CWE-862","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113062","date":"2026-11-07","epss":0.00317,"percentile":0.24769}],"risk":0.25835500000000006,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562237871"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113062","description":"Missing authorization in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121174","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121174","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121174","cwe":"CWE-862","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121174","date":"2026-11-07","epss":0.00317,"percentile":0.24769}],"risk":0.25835500000000006,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/496008447"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121174","description":"Missing authorization in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113063","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113063","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113063","cwe":"CWE-1021","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113063","date":"2026-11-07","epss":0.00316,"percentile":0.24679}],"risk":0.25754000000000005,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562960821"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113063","description":"Clickjacking in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121069","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121069","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121069","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121069","date":"2026-11-07","epss":0.00316,"percentile":0.24655}],"risk":0.25754000000000005,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/568371493"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121069","description":"Use after free in Track in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121092","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121092","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121092","cwe":"CWE-674","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121092","date":"2026-11-07","epss":0.00316,"percentile":0.24655}],"risk":0.25754000000000005,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/565674533"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121092","description":"Uncontrolled recursion in SVG in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113262","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113262","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113262","cwe":"CWE-863","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113262","date":"2026-11-07","epss":0.00316,"percentile":0.24647}],"risk":0.25754000000000005,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/517094892"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113262","description":"Incorrect authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113085","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113085","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113085","cwe":"CWE-200","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113085","date":"2026-11-07","epss":0.00315,"percentile":0.24608}],"risk":0.256725,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/559776316"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113085","description":"Information leak in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"d690b425b757db47","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107696","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107696","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107696","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107696","date":"2026-11-07","epss":0.00359,"percentile":0.29874}],"risk":0.256685,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24902","https://gist.github.com/OxBat/648a0bd60c898f2ffb418e131ce26013","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/rtsp.c#L2225","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-infinite-loop-via-rtsp-redirect-handling-in-rtsp-c"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107696","description":"FFmpeg through 9.0.2 contains an infinite loop vulnerability in ff_rtsp_connect() in libavformat/rtsp.c that follows RTSP 3xx redirects without any redirect limit. Attackers controlling an RTSP server can answer every request with a 302 redirect to itself or another server, causing endless reconnects that saturate a CPU core."},"relatedVulnerabilities":[]},{"artifact":{"id":"243e974ceb6a5245","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107696","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107696","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107696","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107696","date":"2026-11-07","epss":0.00359,"percentile":0.29874}],"risk":0.256685,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24902","https://gist.github.com/OxBat/648a0bd60c898f2ffb418e131ce26013","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/rtsp.c#L2225","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-infinite-loop-via-rtsp-redirect-handling-in-rtsp-c"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107696","description":"FFmpeg through 9.0.2 contains an infinite loop vulnerability in ff_rtsp_connect() in libavformat/rtsp.c that follows RTSP 3xx redirects without any redirect limit. Attackers controlling an RTSP server can answer every request with a 302 redirect to itself or another server, causing endless reconnects that saturate a CPU core."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6896ca1d5ee5394","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107696","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107696","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107696","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107696","date":"2026-11-07","epss":0.00359,"percentile":0.29874}],"risk":0.256685,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24902","https://gist.github.com/OxBat/648a0bd60c898f2ffb418e131ce26013","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/rtsp.c#L2225","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-infinite-loop-via-rtsp-redirect-handling-in-rtsp-c"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107696","description":"FFmpeg through 9.0.2 contains an infinite loop vulnerability in ff_rtsp_connect() in libavformat/rtsp.c that follows RTSP 3xx redirects without any redirect limit. Attackers controlling an RTSP server can answer every request with a 302 redirect to itself or another server, causing endless reconnects that saturate a CPU core."},"relatedVulnerabilities":[]},{"artifact":{"id":"1c27d303595909ee","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107696","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107696","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107696","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107696","date":"2026-11-07","epss":0.00359,"percentile":0.29874}],"risk":0.256685,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24902","https://gist.github.com/OxBat/648a0bd60c898f2ffb418e131ce26013","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/rtsp.c#L2225","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-infinite-loop-via-rtsp-redirect-handling-in-rtsp-c"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107696","description":"FFmpeg through 9.0.2 contains an infinite loop vulnerability in ff_rtsp_connect() in libavformat/rtsp.c that follows RTSP 3xx redirects without any redirect limit. Attackers controlling an RTSP server can answer every request with a 302 redirect to itself or another server, causing endless reconnects that saturate a CPU core."},"relatedVulnerabilities":[]},{"artifact":{"id":"5072120da1bad992","cpes":["cpe:2.3:a:DaveGamble:cjson:1.7.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cjson:cjson:1.7.19-r1:*:*:*:*:*:*:*"],"name":"cjson","purl":"pkg:apk/alpine/cjson@1.7.19-r1?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"1.7.19-r1","language":"","licenses":["MIT"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcjson.so.1"},{"path":"/usr/lib/libcjson.so.1.7.19"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"cjson"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:davegamble:cjson:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-16554","versionConstraint":"= 1.7.19 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:DaveGamble:cjson:1.7.19:*:*:*:*:*:*:*"],"package":{"name":"cjson","version":"1.7.19-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-16554","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cvd@cert.pl","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-16554","cwe":"CWE-190","type":"Secondary","source":"cvd@cert.pl"}],"epss":[{"cve":"CVE-2026-16554","date":"2026-11-07","epss":0.00367,"percentile":0.30737}],"risk":0.2559825,"urls":["https://cert.pl/en/posts/2026/07/CVE-2026-16554","https://github.com/DaveGamble/cJSON","http://www.openwall.com/lists/oss-security/2026/07/30/26","http://www.openwall.com/lists/oss-security/2026/07/31/4"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-16554","description":"cJSON library is vulnerable to an integer overflow in the print_string_ptr() function in cJSON.c on 32-bit platforms. The escape_characters counter, a 32-bit size_t, can wrap around when processing strings containing approximately 858,993,460 or more control characters, causing the output buffer to be allocated based on an underestimated length. When cJSON_PrintBuffered() is used with a pre-allocated buffer, the subsequent write loop overflows the heap allocation. An attacker supplying a crafted JSON string to an application using cJSON on a 32-bit platform can cause a heap buffer overflow, potentially leading to remote code execution, information disclosure, or denial of service.\n\n\n\n\nBecause project creator contact attempts were unsuccessful, the vulnerability has only been confirmed in version 1.7.19 but may also affect other versions."},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113148","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113148","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113148","cwe":"CWE-863","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113148","date":"2026-11-07","epss":0.00314,"percentile":0.24511}],"risk":0.25591,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/518138781"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113148","description":"Incorrect authorization in WebUI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113259","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113259","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113259","cwe":"CWE-862","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113259","date":"2026-11-07","epss":0.00314,"percentile":0.24493}],"risk":0.25591,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/554008013"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113259","description":"Missing authorization in Frames in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121134","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121134","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121134","cwe":"CWE-221","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121134","date":"2026-11-07","epss":0.00313,"percentile":0.24353}],"risk":0.255095,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/498000798"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121134","description":"Information loss in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121204","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121204","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121204","cwe":"CWE-459","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121204","date":"2026-11-07","epss":0.00313,"percentile":0.24353}],"risk":0.255095,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/562957821"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121204","description":"Incomplete cleanup in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113028","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113028","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113028","cwe":"CWE-457","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113028","date":"2026-11-07","epss":0.00312,"percentile":0.24282}],"risk":0.25428,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/560373976"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113028","description":"Use of uninitialized variable in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted media file. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113208","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113208","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113208","cwe":"CWE-200","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113208","date":"2026-11-07","epss":0.00312,"percentile":0.24282}],"risk":0.25428,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/513774784"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113208","description":"Information leak in ContextualSearch in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to leak sensitive information via crafted network traffic. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113042","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113042","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113042","cwe":"CWE-863","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113042","date":"2026-11-07","epss":0.00312,"percentile":0.2425}],"risk":0.25428,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/517486906"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113042","description":"Incorrect authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113109","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113109","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113109","cwe":"CWE-863","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113109","date":"2026-11-07","epss":0.00312,"percentile":0.2425}],"risk":0.25428,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/495471295"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113109","description":"Incorrect authorization in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113253","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113253","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113253","cwe":"CWE-863","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113253","date":"2026-11-07","epss":0.00312,"percentile":0.24188}],"risk":0.25428,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553117109"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113253","description":"Incorrect authorization in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113176","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113176","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113176","cwe":"CWE-200","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113176","date":"2026-11-07","epss":0.00311,"percentile":0.24134}],"risk":0.25346500000000005,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/499143720"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113176","description":"Information leak in Omnibox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to leak sensitive information via crafted network traffic. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113125","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113125","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113125","cwe":"CWE-862","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113125","date":"2026-11-07","epss":0.0031,"percentile":0.23952}],"risk":0.25265,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/563819290"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113125","description":"Missing authorization in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain sensitive information via a crafted Chrome extension. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-119263","versionConstraint":"< 156.0.8078.79 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-119263","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119263","cwe":"CWE-416","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-119263","date":"2026-11-07","epss":0.00271,"percentile":0.19392}],"risk":0.25203000000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02107719452.html","https://issues.chromium.org/issues/575143870"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119263","description":"Use after free in GarbageCollection in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113046","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113046","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113046","cwe":"CWE-451","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113046","date":"2026-11-07","epss":0.00309,"percentile":0.23871}],"risk":0.251835,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562999635"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113046","description":"UI misrepresentation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113090","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113090","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113090","cwe":"CWE-451","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113090","date":"2026-11-07","epss":0.00309,"percentile":0.23871}],"risk":0.251835,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553155133"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113090","description":"UI misrepresentation in Interstitials in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113170","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113170","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113170","cwe":"CWE-451","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113170","date":"2026-11-07","epss":0.00309,"percentile":0.23871}],"risk":0.251835,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562236428"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113170","description":"UI misrepresentation in Autofill in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113221","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113221","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113221","cwe":"CWE-250","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113221","date":"2026-11-07","epss":0.00309,"percentile":0.23871}],"risk":0.251835,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/561921279"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113221","description":"Privilege elevation in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113098","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113098","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113098","cwe":"CWE-843","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113098","date":"2026-11-07","epss":0.0043,"percentile":0.375}],"risk":0.24725,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/548989584"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113098","description":"Type confusion in CacheStorage in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113223","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113223","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113223","cwe":"CWE-706","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113223","date":"2026-11-07","epss":0.0043,"percentile":0.375}],"risk":0.24725,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/513735940"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113223","description":"Incorrect reference resolution in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-118340","versionConstraint":"< 156.0.8078.73 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-118340","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118340","cwe":"CWE-190","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-118340","date":"2026-11-07","epss":0.00265,"percentile":0.18474}],"risk":0.24644999999999997,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html","https://issues.chromium.org/issues/568936530"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-118340","description":"Integer overflow in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"d690b425b757db47","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66039","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66039","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66039","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-66039","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66039","date":"2026-11-07","epss":0.00307,"percentile":0.23664}],"risk":0.24457666666666666,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631","https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66039","description":"FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability in the MACE6 audio decoder that allows attackers to corrupt heap memory by supplying a crafted CAF file with a malicious bytes_per_packet value. Attackers can craft a CAF file with oversized bytes_per_packet and frames_per_packet values in the desc chunk to trigger an integer overflow in mace_decode_frame() during output sample count computation, resulting in an undersized buffer allocation and heap out-of-bounds write that could enable code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"243e974ceb6a5245","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66039","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66039","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66039","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-66039","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66039","date":"2026-11-07","epss":0.00307,"percentile":0.23664}],"risk":0.24457666666666666,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631","https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66039","description":"FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability in the MACE6 audio decoder that allows attackers to corrupt heap memory by supplying a crafted CAF file with a malicious bytes_per_packet value. Attackers can craft a CAF file with oversized bytes_per_packet and frames_per_packet values in the desc chunk to trigger an integer overflow in mace_decode_frame() during output sample count computation, resulting in an undersized buffer allocation and heap out-of-bounds write that could enable code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6896ca1d5ee5394","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66039","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66039","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66039","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-66039","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66039","date":"2026-11-07","epss":0.00307,"percentile":0.23664}],"risk":0.24457666666666666,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631","https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66039","description":"FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability in the MACE6 audio decoder that allows attackers to corrupt heap memory by supplying a crafted CAF file with a malicious bytes_per_packet value. Attackers can craft a CAF file with oversized bytes_per_packet and frames_per_packet values in the desc chunk to trigger an integer overflow in mace_decode_frame() during output sample count computation, resulting in an undersized buffer allocation and heap out-of-bounds write that could enable code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"1c27d303595909ee","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r3?arch=x86_64&distro=alpine-3.24.3&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66039","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66039","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66039","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-66039","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66039","date":"2026-11-07","epss":0.00307,"percentile":0.23664}],"risk":0.24457666666666666,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631","https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66039","description":"FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability in the MACE6 audio decoder that allows attackers to corrupt heap memory by supplying a crafted CAF file with a malicious bytes_per_packet value. Attackers can craft a CAF file with oversized bytes_per_packet and frames_per_packet values in the desc chunk to trigger an integer overflow in mace_decode_frame() during output sample count computation, resulting in an undersized buffer allocation and heap out-of-bounds write that could enable code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113069","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113069","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113069","cwe":"CWE-862","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113069","date":"2026-11-07","epss":0.003,"percentile":0.22836}],"risk":0.24450000000000002,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/496644575"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113069","description":"Missing authorization in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-112999","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-112999","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112999","cwe":"CWE-863","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-112999","date":"2026-11-07","epss":0.003,"percentile":0.22835}],"risk":0.24450000000000002,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/513452101"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112999","description":"Incorrect authorization in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121133","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121133","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121133","cwe":"CWE-706","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121133","date":"2026-11-07","epss":0.00313,"percentile":0.2441}],"risk":0.24414000000000002,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/574604188"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121133","description":"Incorrect reference resolution in Images in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113311","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113311","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113311","cwe":"CWE-362","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113311","date":"2026-11-07","epss":0.00298,"percentile":0.22587}],"risk":0.24287000000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/499365667"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113311","description":"Race condition in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113159","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113159","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113159","cwe":"CWE-706","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113159","date":"2026-11-07","epss":0.00422,"percentile":0.36781}],"risk":0.24264999999999998,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562041808"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113159","description":"Incorrect reference resolution in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113026","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113026","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113026","cwe":"CWE-221","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113026","date":"2026-11-07","epss":0.00422,"percentile":0.3678}],"risk":0.24264999999999998,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/500173014"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113026","description":"Information loss in PDF in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113059","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113059","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113059","cwe":"CWE-362","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113059","date":"2026-11-07","epss":0.00297,"percentile":0.22565}],"risk":0.242055,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/513620385"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113059","description":"Race condition in Sensor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"193eb40fb65beba6","cpes":["cpe:2.3:a:zlib:zlib:1.3.2-r1:*:*:*:*:*:*:*"],"name":"zlib","purl":"pkg:apk/alpine/zlib@1.3.2-r1?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"1.3.2-r1","language":"","licenses":["Zlib"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libz.so.1"},{"path":"/usr/lib/libz.so.1.3.2"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"zlib"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.4-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-4738","versionConstraint":"< 1.4-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"zlib","version":"1.3.2-r1"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"1.4-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-4738","versionConstraint":"< 1.4-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"zlib","version":"1.3.2-r1"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-4738","fix":{"state":"fixed","versions":["1.4-r0"],"available":[{"date":"2026-11-07","kind":"first-observed","version":"1.4-r0"}]},"cvss":[{"type":"Secondary","source":"cve_disclosure@tech.gov.sg","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:U/V:C/RE:L/U:Amber","metrics":{"baseScore":9.4},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4738","cwe":"CWE-119","type":"Secondary","source":"cve_disclosure@tech.gov.sg"}],"epss":[{"cve":"CVE-2026-4738","date":"2026-11-07","epss":0.00263,"percentile":0.18185}],"risk":0.24196,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-4738"},"relatedVulnerabilities":[{"id":"CVE-2026-4738","cvss":[{"type":"Secondary","source":"cve_disclosure@tech.gov.sg","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:U/V:C/RE:L/U:Amber","metrics":{"baseScore":9.4},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4738","cwe":"CWE-119","type":"Secondary","source":"cve_disclosure@tech.gov.sg"}],"epss":[{"cve":"CVE-2026-4738","date":"2026-11-07","epss":0.00263,"percentile":0.18185}],"urls":["https://github.com/OSGeo/gdal/pull/12244"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-4738","description":"Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in OSGeo gdal (frmts/zlib/contrib/infback9 modules). This vulnerability is associated with program files inftree9.C‎.\n\nThis issue affects gdal: before 3.11.0."}]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121073","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121073","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121073","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121073","date":"2026-11-07","epss":0.0026,"percentile":0.17786}],"risk":0.24179999999999996,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/565797214"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121073","description":"Use after free in Network in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121048","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121048","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121048","cwe":"CWE-367","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121048","date":"2026-11-07","epss":0.00295,"percentile":0.22276}],"risk":0.240425,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/567169222"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121048","description":"Race condition in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121079","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121079","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121079","cwe":"CWE-362","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121079","date":"2026-11-07","epss":0.00295,"percentile":0.22276}],"risk":0.240425,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/574351803"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121079","description":"Race condition in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"5072120da1bad992","cpes":["cpe:2.3:a:DaveGamble:cjson:1.7.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cjson:cjson:1.7.19-r1:*:*:*:*:*:*:*"],"name":"cjson","purl":"pkg:apk/alpine/cjson@1.7.19-r1?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"1.7.19-r1","language":"","licenses":["MIT"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcjson.so.1"},{"path":"/usr/lib/libcjson.so.1.7.19"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"cjson"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:davegamble:cjson:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-67217","versionConstraint":"<= 1.7.19 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:DaveGamble:cjson:1.7.19:*:*:*:*:*:*:*"],"package":{"name":"cjson","version":"1.7.19-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-67217","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-67217","cwe":"CWE-696","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-67217","date":"2026-11-07","epss":0.00433,"percentile":0.37798}],"risk":0.24031499999999997,"urls":["https://github.com/DaveGamble/cJSON/blob/v1.7.19/cJSON_Utils.c#L887-L948","https://joshua.hu/cjson-json-parser-cve-vulnerabilities","https://www.vulncheck.com/advisories/cjson-json-patch-non-atomic-application-destroys-data-before-validation"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-67217","description":"cJSON through 1.7.19 applies RFC 6902 JSON Patch operations non-atomically in apply_patch() in cJSON_Utils.c. For a replace operation that is missing its value member, or a move operation whose destination path cannot be resolved, the existing target member is detached and deleted before the operation is fully validated, so the target document is mutated while cJSONUtils_ApplyPatches() or cJSONUtils_ApplyPatchesCaseSensitive() returns a failure status. An attacker who can supply the patch document can destroy addressable members of the target document even though the API reports that the patch failed, defeating the all-or-nothing behavior callers rely on to reject bad patches."},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113169","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113169","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113169","cwe":"CWE-451","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113169","date":"2026-11-07","epss":0.00258,"percentile":0.17511}],"risk":0.23994,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562955271"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113169","description":"UI misrepresentation in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a local attacker leveraging social engineering to spoof UI elements via a co-installed app. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113171","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113171","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113171","cwe":"CWE-451","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113171","date":"2026-11-07","epss":0.00258,"percentile":0.1751}],"risk":0.23994,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/517477395"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113171","description":"UI misrepresentation in Prompts in Google Chrome on on Android prior to 156.0.8078.47 allowed a local attacker leveraging social engineering to spoof UI elements via a co-installed app. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121256","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121256","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121256","cwe":"CWE-672","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121256","date":"2026-11-07","epss":0.00302,"percentile":0.23119}],"risk":0.23858,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/511768565"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121256","description":"Use of released resource in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-76025","versionConstraint":"< 156.0.8078.79 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-76025","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-76025","cwe":"CWE-863","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-76025","date":"2026-11-07","epss":0.00292,"percentile":0.2191}],"risk":0.23798,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02107719452.html","https://issues.chromium.org/issues/559780982"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-76025","description":"Incorrect authorization in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121170","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121170","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121170","cwe":"CWE-913","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121170","date":"2026-11-07","epss":0.00292,"percentile":0.21863}],"risk":0.23798,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/553309390"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121170","description":"Improper resource control in WebCodecs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113186","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113186","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113186","cwe":"CWE-862","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113186","date":"2026-11-07","epss":0.00255,"percentile":0.17189}],"risk":0.23715,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/533644359"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113186","description":"Missing authorization in DevTools in Google Chrome prior to 156.0.8078.47 allowed a local attacker to bypass system access restrictions via a local program. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113118","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113118","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113118","cwe":"CWE-441","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113118","date":"2026-11-07","epss":0.0029,"percentile":0.21709}],"risk":0.23635,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/513184498"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113118","description":"Confused deputy in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113228","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113228","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113228","cwe":"CWE-863","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113228","date":"2026-11-07","epss":0.0029,"percentile":0.21665}],"risk":0.23635,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/554556700"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113228","description":"Incorrect authorization in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-118315","versionConstraint":"< 156.0.8078.73 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-118315","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118315","cwe":"CWE-843","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-118315","date":"2026-11-07","epss":0.00288,"percentile":0.21474}],"risk":0.23472,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html","https://issues.chromium.org/issues/575184164"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-118315","description":"Type confusion in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-118350","versionConstraint":"< 156.0.8078.73 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-118350","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118350","cwe":"CWE-843","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-118350","date":"2026-11-07","epss":0.00288,"percentile":0.21474}],"risk":0.23472,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html","https://issues.chromium.org/issues/567129324"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-118350","description":"Type confusion in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113309","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113309","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113309","cwe":"CWE-416","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113309","date":"2026-11-07","epss":0.00408,"percentile":0.35339}],"risk":0.2346,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/568831768"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113309","description":"Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121084","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121084","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121084","cwe":"CWE-125","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121084","date":"2026-11-07","epss":0.00296,"percentile":0.22416}],"risk":0.23384,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/574214629"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121084","description":"Out of bounds read in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121219","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121219","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121219","cwe":"CWE-190","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121219","date":"2026-11-07","epss":0.00296,"percentile":0.22379}],"risk":0.23384,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/536516239"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121219","description":"Integer overflow in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-118309","versionConstraint":"< 156.0.8078.73 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-118309","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118309","cwe":"CWE-706","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-118309","date":"2026-11-07","epss":0.00251,"percentile":0.16518}],"risk":0.23343,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html","https://issues.chromium.org/issues/576133777"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-118309","description":"Incorrect reference resolution in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113116","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113116","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113116","cwe":"CWE-862","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113116","date":"2026-11-07","epss":0.0025,"percentile":0.16448}],"risk":0.23249999999999998,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553259748"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113116","description":"Missing authorization in DevTools in Google Chrome prior to 156.0.8078.47 allowed a local attacker to bypass system access restrictions via a crafted Chrome extension. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113282","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113282","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113282","cwe":"CWE-362","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113282","date":"2026-11-07","epss":0.00284,"percentile":0.20985}],"risk":0.23146000000000005,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553160293"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113282","description":"Race condition in Views in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113231","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113231","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113231","cwe":"CWE-862","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113231","date":"2026-11-07","epss":0.00283,"percentile":0.20954}],"risk":0.23064500000000002,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/477664550"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113231","description":"Missing authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-118357","versionConstraint":"< 156.0.8078.73 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-118357","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118357","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-118357","date":"2026-11-07","epss":0.00283,"percentile":0.20913}],"risk":0.23064500000000002,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html","https://issues.chromium.org/issues/562191732"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-118357","description":"Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-118359","versionConstraint":"< 156.0.8078.73 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-118359","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118359","cwe":"CWE-416","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-118359","date":"2026-11-07","epss":0.00283,"percentile":0.20912}],"risk":0.23064500000000002,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html","https://issues.chromium.org/issues/573378812"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-118359","description":"Use after free in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113016","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113016","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113016","cwe":"CWE-362","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113016","date":"2026-11-07","epss":0.00281,"percentile":0.20678}],"risk":0.22901500000000002,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/523237501"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113016","description":"Race condition in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113076","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113076","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113076","cwe":"CWE-367","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113076","date":"2026-11-07","epss":0.00281,"percentile":0.20677}],"risk":0.22901500000000002,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/518068748"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113076","description":"Race condition in Toolbar in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121163","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121163","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121163","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121163","date":"2026-11-07","epss":0.00289,"percentile":0.21619}],"risk":0.22831,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/556221528"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121163","description":"Improper input validation in Browser in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-119262","versionConstraint":"< 156.0.8078.79 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-119262","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119262","cwe":"CWE-787","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-119262","date":"2026-11-07","epss":0.0028,"percentile":0.20643}],"risk":0.22820000000000001,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02107719452.html","https://issues.chromium.org/issues/574660146"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119262","description":"Out of bounds write in V8 in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113136","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113136","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113136","cwe":"CWE-367","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113136","date":"2026-11-07","epss":0.0028,"percentile":0.20625}],"risk":0.22820000000000001,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553114456"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113136","description":"Race condition in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to potentially bypass site isolation into a privileged page via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113150","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113150","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113150","cwe":"CWE-362","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113150","date":"2026-11-07","epss":0.0028,"percentile":0.20625}],"risk":0.22820000000000001,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/499250086"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113150","description":"Race condition in Bindings in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113008","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113008","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113008","cwe":"CWE-367","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113008","date":"2026-11-07","epss":0.00278,"percentile":0.20352}],"risk":0.22657000000000002,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/563089510"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113008","description":"Race condition in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113041","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113041","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113041","cwe":"CWE-367","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113041","date":"2026-11-07","epss":0.00278,"percentile":0.20352}],"risk":0.22657000000000002,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/524319033"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113041","description":"Race condition in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113115","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113115","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113115","cwe":"CWE-367","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113115","date":"2026-11-07","epss":0.00278,"percentile":0.20352}],"risk":0.22657000000000002,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/514018015"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113115","description":"Race condition in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113239","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113239","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113239","cwe":"CWE-367","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113239","date":"2026-11-07","epss":0.00278,"percentile":0.20352}],"risk":0.22657000000000002,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/500522368"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113239","description":"Race condition in SiteIsolation in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113075","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113075","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113075","cwe":"CWE-346","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113075","date":"2026-11-07","epss":0.00277,"percentile":0.20229}],"risk":0.225755,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553931271"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113075","description":"Origin validation error in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113048","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113048","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113048","cwe":"CWE-862","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113048","date":"2026-11-07","epss":0.00277,"percentile":0.20218}],"risk":0.225755,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/514445657"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113048","description":"Missing authorization in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions into a privileged page via a crafted Chrome extension. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121090","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121090","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121090","cwe":"CWE-269","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121090","date":"2026-11-07","epss":0.00285,"percentile":0.21112}],"risk":0.22515000000000002,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/568936993"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121090","description":"Improper privilege management in Navigation in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-118311","versionConstraint":"< 156.0.8078.73 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-118311","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118311","cwe":"CWE-416","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-118311","date":"2026-11-07","epss":0.00275,"percentile":0.20034}],"risk":0.22412500000000002,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html","https://issues.chromium.org/issues/573938968"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-118311","description":"Use after free in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-118313","versionConstraint":"< 156.0.8078.73 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-118313","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118313","cwe":"CWE-787","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-118313","date":"2026-11-07","epss":0.00275,"percentile":0.20034}],"risk":0.22412500000000002,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html","https://issues.chromium.org/issues/574032795"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-118313","description":"Out of bounds write in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-118304","versionConstraint":"< 156.0.8078.73 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-118304","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118304","cwe":"CWE-416","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-118304","date":"2026-11-07","epss":0.00275,"percentile":0.20033}],"risk":0.22412500000000002,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html","https://issues.chromium.org/issues/574101376"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-118304","description":"Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-118345","versionConstraint":"< 156.0.8078.73 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-118345","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118345","cwe":"CWE-122","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-118345","date":"2026-11-07","epss":0.00273,"percentile":0.19795}],"risk":0.222495,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html","https://issues.chromium.org/issues/574061024"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-118345","description":"Buffer overflow in PDFium in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113218","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113218","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113218","cwe":"CWE-367","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113218","date":"2026-11-07","epss":0.00272,"percentile":0.19709}],"risk":0.22168000000000002,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/518003952"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113218","description":"Race condition in DataTransfer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113335","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113335","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113335","cwe":"CWE-367","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113335","date":"2026-11-07","epss":0.00269,"percentile":0.19181}],"risk":0.21923500000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/518055882"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113335","description":"Race condition in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113141","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113141","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113141","cwe":"CWE-367","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113141","date":"2026-11-07","epss":0.00267,"percentile":0.18881}],"risk":0.21760500000000002,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553128833"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113141","description":"Race condition in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113060","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113060","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113060","cwe":"CWE-451","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113060","date":"2026-11-07","epss":0.00266,"percentile":0.1857}],"risk":0.21679000000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/514017698"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113060","description":"UI misrepresentation in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed an adjacent attacker leveraging social engineering to spoof UI elements via a malicious peripheral. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-118328","versionConstraint":"< 156.0.8078.73 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-118328","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118328","cwe":"CWE-125","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-118328","date":"2026-11-07","epss":0.00265,"percentile":0.18474}],"risk":0.21597500000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html","https://issues.chromium.org/issues/570927027"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-118328","description":"Out of bounds read in WebRTC in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121211","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121211","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121211","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121211","date":"2026-11-07","epss":0.00273,"percentile":0.19789}],"risk":0.21567,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/577719868"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121211","description":"Use after free in PowerBookmarks in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-118343","versionConstraint":"< 156.0.8078.73 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-118343","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118343","cwe":"CWE-416","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-118343","date":"2026-11-07","epss":0.00264,"percentile":0.18422}],"risk":0.21516000000000002,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html","https://issues.chromium.org/issues/573389782"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-118343","description":"Use after free in ReadingList in Google Chrome prior to 156.0.8078.73 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-118349","versionConstraint":"< 156.0.8078.73 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-118349","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118349","cwe":"CWE-416","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-118349","date":"2026-11-07","epss":0.00264,"percentile":0.18422}],"risk":0.21516000000000002,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html","https://issues.chromium.org/issues/572422506"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-118349","description":"Use after free in Payments in Google Chrome prior to 156.0.8078.73 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-118341","versionConstraint":"< 156.0.8078.73 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-118341","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118341","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-118341","date":"2026-11-07","epss":0.00264,"percentile":0.18421}],"risk":0.21516000000000002,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html","https://issues.chromium.org/issues/574911701"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-118341","description":"Use after free in Modularization in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-118347","versionConstraint":"< 156.0.8078.73 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-118347","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118347","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-118347","date":"2026-11-07","epss":0.00264,"percentile":0.18421}],"risk":0.21516000000000002,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html","https://issues.chromium.org/issues/574911589"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-118347","description":"Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-118351","versionConstraint":"< 156.0.8078.73 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-118351","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118351","cwe":"CWE-416","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-118351","date":"2026-11-07","epss":0.00264,"percentile":0.18421}],"risk":0.21516000000000002,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html","https://issues.chromium.org/issues/570825067"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-118351","description":"Use after free in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-118356","versionConstraint":"< 156.0.8078.73 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-118356","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118356","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-118356","date":"2026-11-07","epss":0.00264,"percentile":0.18421}],"risk":0.21516000000000002,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html","https://issues.chromium.org/issues/575851252"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-118356","description":"Use after free in WTF in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-118334","versionConstraint":"< 156.0.8078.73 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-118334","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118334","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-118334","date":"2026-11-07","epss":0.00264,"percentile":0.1842}],"risk":0.21516000000000002,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html","https://issues.chromium.org/issues/574027204"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-118334","description":"Use after free in ImageCapture in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-118352","versionConstraint":"< 156.0.8078.73 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-118352","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118352","cwe":"CWE-416","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-118352","date":"2026-11-07","epss":0.00264,"percentile":0.1842}],"risk":0.21516000000000002,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html","https://issues.chromium.org/issues/569674221"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-118352","description":"Use after free in Cache in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-119266","versionConstraint":"< 156.0.8078.79 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-119266","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119266","cwe":"CWE-706","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-119266","date":"2026-11-07","epss":0.00264,"percentile":0.18397}],"risk":0.21516000000000002,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02107719452.html","https://issues.chromium.org/issues/575202553"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119266","description":"Incorrect reference resolution in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121171","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121171","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121171","cwe":"CWE-441","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121171","date":"2026-11-07","epss":0.00263,"percentile":0.18275}],"risk":0.21434500000000004,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/562238690"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121171","description":"Confused deputy in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-121212","versionConstraint":"< 157.0.8103.38 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-121212","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-121212","cwe":"CWE-863","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-121212","date":"2026-11-07","epss":0.00263,"percentile":0.18274}],"risk":0.21434500000000004,"urls":["https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/566660676"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-121212","description":"Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113032","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113032","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113032","cwe":"CWE-20","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113032","date":"2026-11-07","epss":0.00263,"percentile":0.18211}],"risk":0.21434500000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/541604102"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113032","description":"Improper input validation in Omnibox in Google Chrome on on Android prior to 156.0.8078.47 allowed a local attacker leveraging social engineering to bypass web origin policy via a co-installed app. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113344","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113344","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113344","cwe":"CWE-754","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113344","date":"2026-11-07","epss":0.00263,"percentile":0.18159}],"risk":0.21434500000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/561926123"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113344","description":"Improper state validation in Performance in Google Chrome prior to 156.0.8078.47 allowed a local attacker to read memory via a local program. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:315bd4ec008a19f7c9072cc8c8d0ee242b5322c1d2c3f2e6ef12bafc8c6d13f0","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-118312","versionConstraint":"< 156.0.8078.73 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-118312","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118312","cwe":"CWE-203","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-118312","date":"2026-11-07","epss":0.0023,"percentile":0.1386}],"risk":0.21389999999999998,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html","https://issues.chromium.org/issues/540025369"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-118312","description":"Observable discrepancy in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]}],"grade":"F","score":"0.00","as_of":"2026-11-10T02:47:12.525Z","grype_db_version":"2026-11-08T06:19:57.000Z"}