{"grype_matches":[{"artifact":{"id":"d690b425b757db47","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64831","versionConstraint":">= 8.0, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64831","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64831","cwe":"CWE-121","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64831","date":"2026-10-25","epss":0.00851,"percentile":0.57942}],"risk":0.6914375,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/92737390dc133daadce47dd7d2ec8ef3d9ebcbed","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23665","https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-vulkan-hevc-decoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64831","description":"FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vulkan HEVC hardware decoder that allows remote attackers to overwrite return addresses and adjacent stack frames by supplying a crafted HEVC/H.265 bitstream. Attackers can embed a malicious vps_num_hrd_parameters value exceeding HEVC_MAX_SUB_LAYERS in any supported container format to overflow stack-allocated arrays in the vk_hevc_end_frame function, potentially achieving arbitrary code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"243e974ceb6a5245","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64831","versionConstraint":">= 8.0, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64831","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64831","cwe":"CWE-121","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64831","date":"2026-10-25","epss":0.00851,"percentile":0.57942}],"risk":0.6914375,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/92737390dc133daadce47dd7d2ec8ef3d9ebcbed","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23665","https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-vulkan-hevc-decoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64831","description":"FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vulkan HEVC hardware decoder that allows remote attackers to overwrite return addresses and adjacent stack frames by supplying a crafted HEVC/H.265 bitstream. Attackers can embed a malicious vps_num_hrd_parameters value exceeding HEVC_MAX_SUB_LAYERS in any supported container format to overflow stack-allocated arrays in the vk_hevc_end_frame function, potentially achieving arbitrary code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6896ca1d5ee5394","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64831","versionConstraint":">= 8.0, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64831","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64831","cwe":"CWE-121","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64831","date":"2026-10-25","epss":0.00851,"percentile":0.57942}],"risk":0.6914375,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/92737390dc133daadce47dd7d2ec8ef3d9ebcbed","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23665","https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-vulkan-hevc-decoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64831","description":"FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vulkan HEVC hardware decoder that allows remote attackers to overwrite return addresses and adjacent stack frames by supplying a crafted HEVC/H.265 bitstream. Attackers can embed a malicious vps_num_hrd_parameters value exceeding HEVC_MAX_SUB_LAYERS in any supported container format to overflow stack-allocated arrays in the vk_hevc_end_frame function, potentially achieving arbitrary code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"1c27d303595909ee","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64831","versionConstraint":">= 8.0, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64831","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64831","cwe":"CWE-121","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64831","date":"2026-10-25","epss":0.00851,"percentile":0.57942}],"risk":0.6914375,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/92737390dc133daadce47dd7d2ec8ef3d9ebcbed","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23665","https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-vulkan-hevc-decoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64831","description":"FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vulkan HEVC hardware decoder that allows remote attackers to overwrite return addresses and adjacent stack frames by supplying a crafted HEVC/H.265 bitstream. Attackers can embed a malicious vps_num_hrd_parameters value exceeding HEVC_MAX_SUB_LAYERS in any supported container format to overflow stack-allocated arrays in the vk_hevc_end_frame function, potentially achieving arbitrary code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"d690b425b757db47","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66040","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66040","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66040","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66040","date":"2026-10-25","epss":0.00776,"percentile":0.5552}],"risk":0.6311466666666667,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66040","description":"FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability in the native PNG and APNG encoders that allows remote attackers to corrupt heap memory by supplying a crafted PNG image with a malicious eXIf chunk. Attackers can craft an eXIf chunk where multiple IFD entries reference the same large value payload, causing canonical serialization to expand the output far beyond the undersized allocation estimated by add_exif_profile_size(), resulting in png_write_chunk() writing tens of thousands of bytes past the buffer boundary, leading to deterministic heap corruption, process crash, and potentially arbitrary code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"243e974ceb6a5245","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66040","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66040","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66040","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66040","date":"2026-10-25","epss":0.00776,"percentile":0.5552}],"risk":0.6311466666666667,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66040","description":"FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability in the native PNG and APNG encoders that allows remote attackers to corrupt heap memory by supplying a crafted PNG image with a malicious eXIf chunk. Attackers can craft an eXIf chunk where multiple IFD entries reference the same large value payload, causing canonical serialization to expand the output far beyond the undersized allocation estimated by add_exif_profile_size(), resulting in png_write_chunk() writing tens of thousands of bytes past the buffer boundary, leading to deterministic heap corruption, process crash, and potentially arbitrary code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6896ca1d5ee5394","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66040","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66040","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66040","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66040","date":"2026-10-25","epss":0.00776,"percentile":0.5552}],"risk":0.6311466666666667,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66040","description":"FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability in the native PNG and APNG encoders that allows remote attackers to corrupt heap memory by supplying a crafted PNG image with a malicious eXIf chunk. Attackers can craft an eXIf chunk where multiple IFD entries reference the same large value payload, causing canonical serialization to expand the output far beyond the undersized allocation estimated by add_exif_profile_size(), resulting in png_write_chunk() writing tens of thousands of bytes past the buffer boundary, leading to deterministic heap corruption, process crash, and potentially arbitrary code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"1c27d303595909ee","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66040","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66040","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66040","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66040","date":"2026-10-25","epss":0.00776,"percentile":0.5552}],"risk":0.6311466666666667,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66040","description":"FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability in the native PNG and APNG encoders that allows remote attackers to corrupt heap memory by supplying a crafted PNG image with a malicious eXIf chunk. Attackers can craft an eXIf chunk where multiple IFD entries reference the same large value payload, causing canonical serialization to expand the output far beyond the undersized allocation estimated by add_exif_profile_size(), resulting in png_write_chunk() writing tens of thousands of bytes past the buffer boundary, leading to deterministic heap corruption, process crash, and potentially arbitrary code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"d690b425b757db47","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64834","versionConstraint":">= 0.6.3, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64834","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64834","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64834","date":"2026-10-25","epss":0.00727,"percentile":0.53855}],"risk":0.56706,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663","https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64834","description":"FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxer within libavformat/rtpdec_asf.c that allows remote attackers to cause denial of service by sending a crafted RTP/ASF stream. The rtp_asf_fix_header function fails to validate a minimum chunksize when iterating over ASF objects, causing the loop pointer to never advance when a chunksize is smaller than the 24-byte minimum ASF object header size, resulting in CPU exhaustion that denies service to legitimate users."},"relatedVulnerabilities":[]},{"artifact":{"id":"243e974ceb6a5245","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64834","versionConstraint":">= 0.6.3, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64834","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64834","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64834","date":"2026-10-25","epss":0.00727,"percentile":0.53855}],"risk":0.56706,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663","https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64834","description":"FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxer within libavformat/rtpdec_asf.c that allows remote attackers to cause denial of service by sending a crafted RTP/ASF stream. The rtp_asf_fix_header function fails to validate a minimum chunksize when iterating over ASF objects, causing the loop pointer to never advance when a chunksize is smaller than the 24-byte minimum ASF object header size, resulting in CPU exhaustion that denies service to legitimate users."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6896ca1d5ee5394","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64834","versionConstraint":">= 0.6.3, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64834","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64834","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64834","date":"2026-10-25","epss":0.00727,"percentile":0.53855}],"risk":0.56706,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663","https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64834","description":"FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxer within libavformat/rtpdec_asf.c that allows remote attackers to cause denial of service by sending a crafted RTP/ASF stream. The rtp_asf_fix_header function fails to validate a minimum chunksize when iterating over ASF objects, causing the loop pointer to never advance when a chunksize is smaller than the 24-byte minimum ASF object header size, resulting in CPU exhaustion that denies service to legitimate users."},"relatedVulnerabilities":[]},{"artifact":{"id":"1c27d303595909ee","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64834","versionConstraint":">= 0.6.3, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64834","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64834","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64834","date":"2026-10-25","epss":0.00727,"percentile":0.53855}],"risk":0.56706,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663","https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64834","description":"FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxer within libavformat/rtpdec_asf.c that allows remote attackers to cause denial of service by sending a crafted RTP/ASF stream. The rtp_asf_fix_header function fails to validate a minimum chunksize when iterating over ASF objects, causing the loop pointer to never advance when a chunksize is smaller than the 24-byte minimum ASF object header size, resulting in CPU exhaustion that denies service to legitimate users."},"relatedVulnerabilities":[]},{"artifact":{"id":"feb6e072f4cd4421","cpes":["cpe:2.3:a:golang:networking:v0.58.0:*:*:*:*:go:*:*","cpe:2.3:a:golang:net:v0.58.0:*:*:*:*:go:*:*"],"name":"golang.org/x/net","purl":"pkg:golang/golang.org/x/net@v0.58.0","type":"go-module","version":"v0.58.0","language":"go","licenses":[],"metadata":{"h1Digest":"h1:ynWG7rqYi4ccpTEuPZ2QGWHktVEM9DMCj9yzDE0Q7To=","mainModule":"k6","architecture":"amd64","goCompiledVersion":"go1.26.10"},"locations":[{"path":"/usr/libexec/sm-k6/k6-v2","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/usr/libexec/sm-k6/k6-v2","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.60.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6612","versionConstraint":"<0.60.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/net","version":"v0.58.0"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6612","fix":{"state":"fixed","versions":["0.60.0"],"available":[{"date":"2026-10-08","kind":"release","version":"0.60.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78663","cwe":"CWE-675","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78663","date":"2026-10-25","epss":0.00622,"percentile":0.49496}],"risk":0.56291,"urls":["https://go.dev/cl/847310","https://go.dev/issue/81743","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs"],"severity":"Critical","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847187","description":"The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configured connection-level flow control limit (MaxReceiveBufferPerConnection). Total buffered data is still limited by the concurrent stream limit and stream-level flow control."},"relatedVulnerabilities":[{"id":"CVE-2026-78663","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78663","cwe":"CWE-675","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78663","date":"2026-10-25","epss":0.00622,"percentile":0.49496}],"urls":["https://go.dev/cl/847187","https://go.dev/cl/847310","https://go.dev/issue/81743","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6612"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78663","description":"The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configured connection-level flow control limit (MaxReceiveBufferPerConnection). Total buffered data is still limited by the concurrent stream limit and stream-level flow control."}]},{"artifact":{"id":"5072120da1bad992","cpes":["cpe:2.3:a:DaveGamble:cjson:1.7.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cjson:cjson:1.7.19-r1:*:*:*:*:*:*:*"],"name":"cjson","purl":"pkg:apk/alpine/cjson@1.7.19-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"1.7.19-r1","language":"","licenses":["MIT"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcjson.so.1"},{"path":"/usr/lib/libcjson.so.1.7.19"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"cjson"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:davegamble:cjson:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-67215","versionConstraint":"<= 1.7.19 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:DaveGamble:cjson:1.7.19:*:*:*:*:*:*:*"],"package":{"name":"cjson","version":"1.7.19-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-67215","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-67215","cwe":"CWE-674","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-67215","date":"2026-10-25","epss":0.007,"percentile":0.52885}],"risk":0.546,"urls":["https://github.com/DaveGamble/cJSON/blob/v1.7.19/cJSON.c#L253-L261","https://github.com/DaveGamble/cJSON/blob/v1.7.19/cJSON_Utils.c#L906-L940","https://joshua.hu/cjson-json-parser-cve-vulnerabilities","https://www.vulncheck.com/advisories/cjson-json-patch-copy-add-uncontrolled-recursion-stack-exhaustion"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-67215","description":"cJSON through 1.7.19 is vulnerable to uncontrolled recursion leading to stack exhaustion when an untrusted RFC 6902 JSON Patch is applied via cJSONUtils_ApplyPatches() or cJSONUtils_ApplyPatchesCaseSensitive(). A patch containing add and copy operations grafts duplicated subtrees to amplify document depth beyond the parser's nesting limit: cJSON_Delete() recurses with no depth bound, and the cJSON_Duplicate() guard CJSON_CIRCULAR_LIMIT is set to 10000, ten times the parser's 1000-level nesting limit and high enough to overflow a default thread stack. An attacker who can supply the patch document can crash the process, resulting in denial of service."},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2015-1239","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2015-1239","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2015-1239","cwe":"CWE-415","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-1239","date":"2026-10-25","epss":0.01038,"percentile":0.63701}],"risk":0.53976,"urls":["https://bugs.chromium.org/p/chromium/issues/detail?id=430891","https://bugs.chromium.org/p/chromium/issues/detail?id=457493","https://lists.debian.org/debian-lts-announce/2018/07/msg00025.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2015-1239","description":"Double free vulnerability in the j2k_read_ppm_v3 function in OpenJPEG before r2997, as used in PDFium in Google Chrome, allows remote attackers to cause a denial of service (process crash) via a crafted PDF."},"relatedVulnerabilities":[]},{"artifact":{"id":"d690b425b757db47","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64830","versionConstraint":">= 2.1, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64830","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64830","cwe":"CWE-122","type":"Primary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64830","date":"2026-10-25","epss":0.00646,"percentile":0.50664}],"risk":0.524875,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657","https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64830","description":"FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjacent heap memory by supplying a malicious .sub/.idx subtitle file declaring more distinct stream IDs than the fixed-size array bounds in libavformat/mpeg.c. Attackers can craft a subtitle file with excessive distinct stream IDs to trigger unbounded writes beyond the vobsub->q[] array boundary via ff_subtitles_queue_insert(), potentially achieving arbitrary code execution in any application using FFmpeg's VobSub demuxer."},"relatedVulnerabilities":[]},{"artifact":{"id":"243e974ceb6a5245","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64830","versionConstraint":">= 2.1, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64830","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64830","cwe":"CWE-122","type":"Primary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64830","date":"2026-10-25","epss":0.00646,"percentile":0.50664}],"risk":0.524875,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657","https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64830","description":"FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjacent heap memory by supplying a malicious .sub/.idx subtitle file declaring more distinct stream IDs than the fixed-size array bounds in libavformat/mpeg.c. Attackers can craft a subtitle file with excessive distinct stream IDs to trigger unbounded writes beyond the vobsub->q[] array boundary via ff_subtitles_queue_insert(), potentially achieving arbitrary code execution in any application using FFmpeg's VobSub demuxer."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6896ca1d5ee5394","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64830","versionConstraint":">= 2.1, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64830","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64830","cwe":"CWE-122","type":"Primary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64830","date":"2026-10-25","epss":0.00646,"percentile":0.50664}],"risk":0.524875,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657","https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64830","description":"FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjacent heap memory by supplying a malicious .sub/.idx subtitle file declaring more distinct stream IDs than the fixed-size array bounds in libavformat/mpeg.c. Attackers can craft a subtitle file with excessive distinct stream IDs to trigger unbounded writes beyond the vobsub->q[] array boundary via ff_subtitles_queue_insert(), potentially achieving arbitrary code execution in any application using FFmpeg's VobSub demuxer."},"relatedVulnerabilities":[]},{"artifact":{"id":"1c27d303595909ee","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64830","versionConstraint":">= 2.1, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64830","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64830","cwe":"CWE-122","type":"Primary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64830","date":"2026-10-25","epss":0.00646,"percentile":0.50664}],"risk":0.524875,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657","https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64830","description":"FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjacent heap memory by supplying a malicious .sub/.idx subtitle file declaring more distinct stream IDs than the fixed-size array bounds in libavformat/mpeg.c. Attackers can craft a subtitle file with excessive distinct stream IDs to trigger unbounded writes beyond the vobsub->q[] array boundary via ff_subtitles_queue_insert(), potentially achieving arbitrary code execution in any application using FFmpeg's VobSub demuxer."},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113303","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113303","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113303","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113303","date":"2026-10-25","epss":0.00601,"percentile":0.48465}],"risk":0.48981500000000006,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/574041825"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113303","description":"Memory corruption in WebRTC in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"},"relatedVulnerabilities":[]},{"artifact":{"id":"5072120da1bad992","cpes":["cpe:2.3:a:DaveGamble:cjson:1.7.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cjson:cjson:1.7.19-r1:*:*:*:*:*:*:*"],"name":"cjson","purl":"pkg:apk/alpine/cjson@1.7.19-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"1.7.19-r1","language":"","licenses":["MIT"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcjson.so.1"},{"path":"/usr/lib/libcjson.so.1.7.19"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"cjson"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:davegamble:cjson:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-67216","versionConstraint":"<= 1.7.19 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:DaveGamble:cjson:1.7.19:*:*:*:*:*:*:*"],"package":{"name":"cjson","version":"1.7.19-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-67216","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-67216","cwe":"CWE-407","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-67216","date":"2026-10-25","epss":0.00645,"percentile":0.50645}],"risk":0.474075,"urls":["https://github.com/DaveGamble/cJSON/blob/v1.7.19/cJSON.c#L3057-L3180","https://joshua.hu/cjson-json-parser-cve-vulnerabilities","https://www.vulncheck.com/advisories/cjson-cjson-compare-exponential-complexity-denial-of-service"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-67216","description":"cJSON through 1.7.19 contains an inefficient algorithmic complexity flaw in cJSON_Compare(). When comparing objects, the function recurses into each shared subtree twice, once in each direction, with no depth guard, making the running time exponential in nesting depth. A small, deeply nested document of a few hundred bytes (depth around 40) compared for equality consumes hours of CPU, and the cost roughly doubles with each additional level of nesting. An application that calls cJSON_Compare() on attacker-influenced JSON that is structurally equal to a reference document is exposed to a denial-of-service condition."},"relatedVulnerabilities":[]},{"artifact":{"id":"feb6e072f4cd4421","cpes":["cpe:2.3:a:golang:networking:v0.58.0:*:*:*:*:go:*:*","cpe:2.3:a:golang:net:v0.58.0:*:*:*:*:go:*:*"],"name":"golang.org/x/net","purl":"pkg:golang/golang.org/x/net@v0.58.0","type":"go-module","version":"v0.58.0","language":"go","licenses":[],"metadata":{"h1Digest":"h1:ynWG7rqYi4ccpTEuPZ2QGWHktVEM9DMCj9yzDE0Q7To=","mainModule":"k6","architecture":"amd64","goCompiledVersion":"go1.26.10"},"locations":[{"path":"/usr/libexec/sm-k6/k6-v2","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/usr/libexec/sm-k6/k6-v2","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.60.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6603","versionConstraint":"<0.60.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/net","version":"v0.58.0"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6603","fix":{"state":"fixed","versions":["0.60.0"],"available":[{"date":"2026-10-08","kind":"release","version":"0.60.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78659","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78659","date":"2026-10-25","epss":0.00627,"percentile":0.4977}],"risk":0.47025,"urls":["https://go.dev/cl/847314","https://go.dev/issue/81857","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847185","description":"When \"Trailer\" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending a \"Trailer\" header that declares a large number of fields, causing the server to allocate a disproportionate amount of memory while bypassing Server.MaxHeaderValueCount and Server.MaxHeaderBytes limits. This exploit is not applicable for HTTP/1 servers, which do not support multiplexing a large number of requests over one TCP connection, and whose Server.MaxHeaderBytes are calculated differently."},"relatedVulnerabilities":[{"id":"CVE-2026-78659","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78659","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78659","date":"2026-10-25","epss":0.00627,"percentile":0.4977}],"urls":["https://go.dev/cl/847185","https://go.dev/cl/847314","https://go.dev/issue/81857","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6603"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78659","description":"When \"Trailer\" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending a \"Trailer\" header that declares a large number of fields, causing the server to allocate a disproportionate amount of memory while bypassing Server.MaxHeaderValueCount and Server.MaxHeaderBytes limits. This exploit is not applicable for HTTP/1 servers, which do not support multiplexing a large number of requests over one TCP connection, and whose Server.MaxHeaderBytes are calculated differently."}]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113021","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113021","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113021","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113021","date":"2026-10-25","epss":0.00572,"percentile":0.4702}],"risk":0.46618000000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553146562"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113021","description":"Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113072","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113072","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113072","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113072","date":"2026-10-25","epss":0.005,"percentile":0.42527}],"risk":0.46499999999999997,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/570638836"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113072","description":"Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"},"relatedVulnerabilities":[]},{"artifact":{"id":"feb6e072f4cd4421","cpes":["cpe:2.3:a:golang:networking:v0.58.0:*:*:*:*:go:*:*","cpe:2.3:a:golang:net:v0.58.0:*:*:*:*:go:*:*"],"name":"golang.org/x/net","purl":"pkg:golang/golang.org/x/net@v0.58.0","type":"go-module","version":"v0.58.0","language":"go","licenses":[],"metadata":{"h1Digest":"h1:ynWG7rqYi4ccpTEuPZ2QGWHktVEM9DMCj9yzDE0Q7To=","mainModule":"k6","architecture":"amd64","goCompiledVersion":"go1.26.10"},"locations":[{"path":"/usr/libexec/sm-k6/k6-v2","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/usr/libexec/sm-k6/k6-v2","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.60.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6611","versionConstraint":"<0.60.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/net","version":"v0.58.0"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6611","fix":{"state":"fixed","versions":["0.60.0"],"available":[{"date":"2026-10-08","kind":"release","version":"0.60.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78669","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78669","date":"2026-10-25","epss":0.00614,"percentile":0.49111}],"risk":0.46049999999999996,"urls":["https://go.dev/cl/847308","https://go.dev/issue/81742","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847186","description":"A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values."},"relatedVulnerabilities":[{"id":"CVE-2026-78669","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78669","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78669","date":"2026-10-25","epss":0.00614,"percentile":0.49111}],"urls":["https://go.dev/cl/847186","https://go.dev/cl/847308","https://go.dev/issue/81742","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6611"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78669","description":"A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values."}]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113336","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113336","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113336","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113336","date":"2026-10-25","epss":0.00495,"percentile":0.42169}],"risk":0.46035,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/569286604"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113336","description":"Memory corruption in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113089","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113089","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113089","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113089","date":"2026-10-25","epss":0.00495,"percentile":0.42168}],"risk":0.46035,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/563362367"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113089","description":"Improper input validation in PrintPreview in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113235","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113235","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113235","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113235","date":"2026-10-25","epss":0.00495,"percentile":0.42168}],"risk":0.46035,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/563352925"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113235","description":"Improper input validation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113300","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113300","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113300","cwe":"CWE-787","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113300","date":"2026-10-25","epss":0.00495,"percentile":0.42168}],"risk":0.46035,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/513468106"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113300","description":"Out of bounds write in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113328","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113328","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113328","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113328","date":"2026-10-25","epss":0.00495,"percentile":0.42168}],"risk":0.46035,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/518055862"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113328","description":"Improper input validation in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113014","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113014","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113014","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113014","date":"2026-10-25","epss":0.00495,"percentile":0.42167}],"risk":0.46035,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/502251640"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113014","description":"Use after free in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113020","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113020","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113020","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113020","date":"2026-10-25","epss":0.00495,"percentile":0.42167}],"risk":0.46035,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/565838017"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113020","description":"Improper input validation in Date in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113023","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113023","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113023","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113023","date":"2026-10-25","epss":0.00495,"percentile":0.42167}],"risk":0.46035,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/517148875"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113023","description":"Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113161","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113161","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113161","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113161","date":"2026-10-25","epss":0.0056,"percentile":0.46358}],"risk":0.45640000000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/568945639"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113161","description":"Use after free in WebRTC in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113299","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113299","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113299","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113299","date":"2026-10-25","epss":0.0056,"percentile":0.46358}],"risk":0.45640000000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/532987588"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113299","description":"Memory corruption in WebProtect in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113024","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113024","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113024","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113024","date":"2026-10-25","epss":0.0056,"percentile":0.46357}],"risk":0.45640000000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/533043403"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113024","description":"Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113027","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113027","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113027","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113027","date":"2026-10-25","epss":0.0056,"percentile":0.46357}],"risk":0.45640000000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/505807063"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113027","description":"Memory corruption in WebFonts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113202","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113202","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113202","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113202","date":"2026-10-25","epss":0.0056,"percentile":0.46357}],"risk":0.45640000000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/523201686"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113202","description":"Use after free in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113301","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113301","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113301","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113301","date":"2026-10-25","epss":0.0056,"percentile":0.46357}],"risk":0.45640000000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/497299147"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113301","description":"Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113186","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113186","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113186","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113186","date":"2026-10-25","epss":0.00475,"percentile":0.40772}],"risk":0.44175,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/533644359"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113186","description":"Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113189","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113189","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113189","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113189","date":"2026-10-25","epss":0.00475,"percentile":0.40772}],"risk":0.44175,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/514016335"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113189","description":"Use after free in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113270","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113270","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113270","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113270","date":"2026-10-25","epss":0.00475,"percentile":0.40772}],"risk":0.44175,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/557501968"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113270","description":"Use after free in Internals in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113342","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113342","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113342","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113342","date":"2026-10-25","epss":0.00475,"percentile":0.40772}],"risk":0.44175,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562024413"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113342","description":"Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113261","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113261","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113261","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113261","date":"2026-10-25","epss":0.00475,"percentile":0.40771}],"risk":0.44175,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/515440087"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113261","description":"Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113269","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113269","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113269","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113269","date":"2026-10-25","epss":0.00538,"percentile":0.4504}],"risk":0.4384700000000001,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553334273"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113269","description":"Memory corruption in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113043","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113043","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113043","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113043","date":"2026-10-25","epss":0.00534,"percentile":0.44751}],"risk":0.43521000000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/521978171"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113043","description":"Use after free in iOSWeb in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113222","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113222","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113222","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113222","date":"2026-10-25","epss":0.00466,"percentile":0.40049}],"risk":0.43338,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/566091009"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113222","description":"Use after free in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-112992","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-112992","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112992","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-112992","date":"2026-10-25","epss":0.00466,"percentile":0.40048}],"risk":0.43338,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/514422784"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112992","description":"Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113056","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113056","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113056","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113056","date":"2026-10-25","epss":0.00466,"percentile":0.40048}],"risk":0.43338,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/502288792"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113056","description":"Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113138","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113138","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113138","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113138","date":"2026-10-25","epss":0.00466,"percentile":0.40048}],"risk":0.43338,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/561396577"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113138","description":"Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113171","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113171","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113171","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113171","date":"2026-10-25","epss":0.00466,"percentile":0.40048}],"risk":0.43338,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/517477395"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113171","description":"Memory corruption in Prompts in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113007","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113007","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113007","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113007","date":"2026-10-25","epss":0.00466,"percentile":0.40047}],"risk":0.43338,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553394270"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113007","description":"Memory corruption in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113116","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113116","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113116","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113116","date":"2026-10-25","epss":0.00466,"percentile":0.40047}],"risk":0.43338,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553259748"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113116","description":"Use after free in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113126","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113126","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113126","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113126","date":"2026-10-25","epss":0.00466,"percentile":0.40047}],"risk":0.43338,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/531182364"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113126","description":"Memory corruption in PolicyContainer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113169","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113169","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113169","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113169","date":"2026-10-25","epss":0.00466,"percentile":0.40047}],"risk":0.43338,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562955271"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113169","description":"Memory corruption in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113263","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113263","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113263","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113263","date":"2026-10-25","epss":0.00465,"percentile":0.3997}],"risk":0.43244999999999995,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/497026542"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113263","description":"Use after free in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113058","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113058","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113058","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113058","date":"2026-10-25","epss":0.00528,"percentile":0.44388}],"risk":0.43032000000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/551059870"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113058","description":"Use after free in WebUI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113103","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113103","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113103","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113103","date":"2026-10-25","epss":0.00528,"percentile":0.44388}],"risk":0.43032000000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/500474551"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113103","description":"Use after free in WebProtect in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113163","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113163","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113163","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113163","date":"2026-10-25","epss":0.00528,"percentile":0.44388}],"risk":0.43032000000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/548066294"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113163","description":"Use after free in WebGL in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113230","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113230","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113230","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113230","date":"2026-10-25","epss":0.00528,"percentile":0.44388}],"risk":0.43032000000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553153823"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113230","description":"Improper input validation in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113127","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113127","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113127","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113127","date":"2026-10-25","epss":0.00528,"percentile":0.44387}],"risk":0.43032000000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/501730091"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113127","description":"Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113211","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113211","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113211","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113211","date":"2026-10-25","epss":0.00451,"percentile":0.38887}],"risk":0.41942999999999997,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/498828493"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113211","description":"Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-112994","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-112994","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112994","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-112994","date":"2026-10-25","epss":0.00514,"percentile":0.43479}],"risk":0.41891,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562962437"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112994","description":"Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113147","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113147","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113147","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113147","date":"2026-10-25","epss":0.00514,"percentile":0.43479}],"risk":0.41891,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/501531546"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113147","description":"Improper input validation in WebShare in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"d690b425b757db47","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64835","versionConstraint":">= 4.4, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64835","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64835","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64835","date":"2026-10-25","epss":0.00496,"percentile":0.42238}],"risk":0.40299999999999997,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64835","description":"FFmpeg versions 4.4 through 8.1.2 contain an out-of-bounds memory access vulnerability in the ADX audio decoder within libavcodec/adxdec.c that allows attackers to trigger both out-of-bounds reads and writes by supplying a crafted ADX or AAX audio file with a mid-stream channel layout change. When AV_PKT_DATA_NEW_EXTRADATA side data is received mid-stream, the adx_decode_frame function re-parses the stream header but fails to update the internal channel state, causing subsequent decoding operations to access the prev[] state array using a stale channel count."},"relatedVulnerabilities":[]},{"artifact":{"id":"243e974ceb6a5245","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64835","versionConstraint":">= 4.4, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64835","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64835","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64835","date":"2026-10-25","epss":0.00496,"percentile":0.42238}],"risk":0.40299999999999997,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64835","description":"FFmpeg versions 4.4 through 8.1.2 contain an out-of-bounds memory access vulnerability in the ADX audio decoder within libavcodec/adxdec.c that allows attackers to trigger both out-of-bounds reads and writes by supplying a crafted ADX or AAX audio file with a mid-stream channel layout change. When AV_PKT_DATA_NEW_EXTRADATA side data is received mid-stream, the adx_decode_frame function re-parses the stream header but fails to update the internal channel state, causing subsequent decoding operations to access the prev[] state array using a stale channel count."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6896ca1d5ee5394","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64835","versionConstraint":">= 4.4, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64835","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64835","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64835","date":"2026-10-25","epss":0.00496,"percentile":0.42238}],"risk":0.40299999999999997,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64835","description":"FFmpeg versions 4.4 through 8.1.2 contain an out-of-bounds memory access vulnerability in the ADX audio decoder within libavcodec/adxdec.c that allows attackers to trigger both out-of-bounds reads and writes by supplying a crafted ADX or AAX audio file with a mid-stream channel layout change. When AV_PKT_DATA_NEW_EXTRADATA side data is received mid-stream, the adx_decode_frame function re-parses the stream header but fails to update the internal channel state, causing subsequent decoding operations to access the prev[] state array using a stale channel count."},"relatedVulnerabilities":[]},{"artifact":{"id":"1c27d303595909ee","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64835","versionConstraint":">= 4.4, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64835","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64835","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64835","date":"2026-10-25","epss":0.00496,"percentile":0.42238}],"risk":0.40299999999999997,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64835","description":"FFmpeg versions 4.4 through 8.1.2 contain an out-of-bounds memory access vulnerability in the ADX audio decoder within libavcodec/adxdec.c that allows attackers to trigger both out-of-bounds reads and writes by supplying a crafted ADX or AAX audio file with a mid-stream channel layout change. When AV_PKT_DATA_NEW_EXTRADATA side data is received mid-stream, the adx_decode_frame function re-parses the stream header but fails to update the internal channel state, causing subsequent decoding operations to access the prev[] state array using a stale channel count."},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113084","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113084","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113084","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113084","date":"2026-10-25","epss":0.00424,"percentile":0.36423}],"risk":0.39432,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/518099505"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113084","description":"Improper input validation in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113055","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113055","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113055","cwe":"CWE-843","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113055","date":"2026-10-25","epss":0.00483,"percentile":0.41354}],"risk":0.393645,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/340578708"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113055","description":"Type confusion in FullScreen in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113204","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113204","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113204","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113204","date":"2026-10-25","epss":0.00481,"percentile":0.41158}],"risk":0.39201500000000006,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/544328873"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113204","description":"Use after free in TrustedWebActivities in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113037","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113037","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113037","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113037","date":"2026-10-25","epss":0.00471,"percentile":0.40499}],"risk":0.383865,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/560939312"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113037","description":"Use after free in WebSockets in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113073","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113073","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113073","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113073","date":"2026-10-25","epss":0.00471,"percentile":0.40499}],"risk":0.383865,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/519217664"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113073","description":"Use after free in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113148","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113148","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113148","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113148","date":"2026-10-25","epss":0.00468,"percentile":0.40225}],"risk":0.38142000000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/518138781"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113148","description":"Memory corruption in WebUI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113217","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113217","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113217","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113217","date":"2026-10-25","epss":0.00468,"percentile":0.40225}],"risk":0.38142000000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/568900845"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113217","description":"Use after free in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"d690b425b757db47","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66041","versionConstraint":">= 7.0, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66041","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66041","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66041","date":"2026-10-25","epss":0.00487,"percentile":0.41672}],"risk":0.37986000000000003,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66041","description":"FFmpeg 7.0 through 8.1.2, fixed in commit 4da9812, contains a heap out-of-bounds write vulnerability in the vf_quirc filter that allows an attacker to corrupt heap memory by supplying a crafted PGS/SUP subtitle file with mismatched frame dimensions. Attackers can provide a subtitle file whose second presentation has larger dimensions than its first, causing av_image_copy_plane() to copy data exceeding the initial allocation size into the undersized libquirc grayscale image buffer, resulting in heap corruption and process crash with potential for code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"243e974ceb6a5245","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66041","versionConstraint":">= 7.0, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66041","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66041","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66041","date":"2026-10-25","epss":0.00487,"percentile":0.41672}],"risk":0.37986000000000003,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66041","description":"FFmpeg 7.0 through 8.1.2, fixed in commit 4da9812, contains a heap out-of-bounds write vulnerability in the vf_quirc filter that allows an attacker to corrupt heap memory by supplying a crafted PGS/SUP subtitle file with mismatched frame dimensions. Attackers can provide a subtitle file whose second presentation has larger dimensions than its first, causing av_image_copy_plane() to copy data exceeding the initial allocation size into the undersized libquirc grayscale image buffer, resulting in heap corruption and process crash with potential for code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6896ca1d5ee5394","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66041","versionConstraint":">= 7.0, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66041","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66041","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66041","date":"2026-10-25","epss":0.00487,"percentile":0.41672}],"risk":0.37986000000000003,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66041","description":"FFmpeg 7.0 through 8.1.2, fixed in commit 4da9812, contains a heap out-of-bounds write vulnerability in the vf_quirc filter that allows an attacker to corrupt heap memory by supplying a crafted PGS/SUP subtitle file with mismatched frame dimensions. Attackers can provide a subtitle file whose second presentation has larger dimensions than its first, causing av_image_copy_plane() to copy data exceeding the initial allocation size into the undersized libquirc grayscale image buffer, resulting in heap corruption and process crash with potential for code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"1c27d303595909ee","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66041","versionConstraint":">= 7.0, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66041","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66041","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66041","date":"2026-10-25","epss":0.00487,"percentile":0.41672}],"risk":0.37986000000000003,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66041","description":"FFmpeg 7.0 through 8.1.2, fixed in commit 4da9812, contains a heap out-of-bounds write vulnerability in the vf_quirc filter that allows an attacker to corrupt heap memory by supplying a crafted PGS/SUP subtitle file with mismatched frame dimensions. Attackers can provide a subtitle file whose second presentation has larger dimensions than its first, causing av_image_copy_plane() to copy data exceeding the initial allocation size into the undersized libquirc grayscale image buffer, resulting in heap corruption and process crash with potential for code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113271","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113271","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113271","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113271","date":"2026-10-25","epss":0.00456,"percentile":0.39345}],"risk":0.37163999999999997,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/571618833"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113271","description":"Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113279","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113279","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113279","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113279","date":"2026-10-25","epss":0.00456,"percentile":0.39345}],"risk":0.37163999999999997,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/570093145"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113279","description":"Memory corruption in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113280","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113280","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113280","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113280","date":"2026-10-25","epss":0.00456,"percentile":0.39345}],"risk":0.37163999999999997,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/570740320"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113280","description":"Memory corruption in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113239","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113239","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113239","cwe":"CWE-118","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113239","date":"2026-10-25","epss":0.00455,"percentile":0.39221}],"risk":0.37082500000000007,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/500522368"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113239","description":"Range error in SiteIsolation in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"eb222fe89d397776","cpes":["cpe:2.3:a:zlib:zlib:1.3.2-r0:*:*:*:*:*:*:*"],"name":"zlib","purl":"pkg:apk/alpine/zlib@1.3.2-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"1.3.2-r0","language":"","licenses":["Zlib"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libz.so.1"},{"path":"/usr/lib/libz.so.1.3.2"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"zlib"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.3.2-r1"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-85091","versionConstraint":"< 1.3.2-r1 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.2"},"package":{"name":"zlib","version":"1.3.2-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"1.3.2-r1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-85091","versionConstraint":"< 1.3.2-r1 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.2"},"package":{"name":"zlib","version":"1.3.2-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-85091","fix":{"state":"fixed","versions":["1.3.2-r1"],"available":[{"date":"2026-10-07","kind":"first-observed","version":"1.3.2-r1"}]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-85091","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-85091","date":"2026-10-25","epss":0.00469,"percentile":0.4029}],"risk":0.37051,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-85091"},"relatedVulnerabilities":[{"id":"CVE-2026-85091","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-85091","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-85091","date":"2026-10-25","epss":0.00469,"percentile":0.4029}],"urls":["https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490","https://github.com/madler/zlib","https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393","https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-85091","description":"zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function when processing non-blocking gzwrite() operations with stale external buffer pointers. Attackers can trigger the overflow by calling gzprintf() or gzvprintf() after a write stall, causing an unchecked memmove() to write beyond the internal input buffer boundary."}]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113243","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113243","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113243","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113243","date":"2026-10-25","epss":0.00453,"percentile":0.39052}],"risk":0.36919500000000005,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553147798"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113243","description":"Memory corruption in DOM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113249","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113249","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113249","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113249","date":"2026-10-25","epss":0.00453,"percentile":0.39052}],"risk":0.36919500000000005,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/513480110"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113249","description":"Improper input validation in Mobile in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113320","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113320","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113320","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113320","date":"2026-10-25","epss":0.00453,"percentile":0.39051}],"risk":0.36919500000000005,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/429432679"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113320","description":"Memory corruption in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113182","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113182","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113182","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113182","date":"2026-10-25","epss":0.00452,"percentile":0.39027}],"risk":0.36838,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562994234"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113182","description":"Memory corruption in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113107","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113107","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113107","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113107","date":"2026-10-25","epss":0.00452,"percentile":0.39026}],"risk":0.36838,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/559776445"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113107","description":"Use after free in Media in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113156","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113156","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113156","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113156","date":"2026-10-25","epss":0.00452,"percentile":0.39026}],"risk":0.36838,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553253820"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113156","description":"Use after free in Messages in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113244","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113244","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113244","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113244","date":"2026-10-25","epss":0.00452,"percentile":0.39026}],"risk":0.36838,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/514078112"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113244","description":"Improper input validation in UI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113331","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113331","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113331","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113331","date":"2026-10-25","epss":0.00452,"percentile":0.39026}],"risk":0.36838,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562993085"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113331","description":"Memory corruption in Controls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113013","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113013","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113013","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113013","date":"2026-10-25","epss":0.00452,"percentile":0.39025}],"risk":0.36838,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/563814519"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113013","description":"Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113145","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113145","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113145","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113145","date":"2026-10-25","epss":0.00452,"percentile":0.39025}],"risk":0.36838,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553169805"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113145","description":"Memory corruption in Messages in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113313","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113313","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113313","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113313","date":"2026-10-25","epss":0.00452,"percentile":0.39025}],"risk":0.36838,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/554475322"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113313","description":"Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113314","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113314","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113314","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113314","date":"2026-10-25","epss":0.00452,"percentile":0.39025}],"risk":0.36838,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562970433"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113314","description":"Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113088","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113088","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113088","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113088","date":"2026-10-25","epss":0.00452,"percentile":0.39024}],"risk":0.36838,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/563812927"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113088","description":"Memory corruption in Mobile in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113294","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113294","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113294","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113294","date":"2026-10-25","epss":0.00452,"percentile":0.39024}],"risk":0.36838,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/563015337"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113294","description":"Improper input validation in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113306","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113306","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113306","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113306","date":"2026-10-25","epss":0.00452,"percentile":0.39024}],"risk":0.36838,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/524695296"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113306","description":"Improper input validation in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"feb6e072f4cd4421","cpes":["cpe:2.3:a:golang:networking:v0.58.0:*:*:*:*:go:*:*","cpe:2.3:a:golang:net:v0.58.0:*:*:*:*:go:*:*"],"name":"golang.org/x/net","purl":"pkg:golang/golang.org/x/net@v0.58.0","type":"go-module","version":"v0.58.0","language":"go","licenses":[],"metadata":{"h1Digest":"h1:ynWG7rqYi4ccpTEuPZ2QGWHktVEM9DMCj9yzDE0Q7To=","mainModule":"k6","architecture":"amd64","goCompiledVersion":"go1.26.10"},"locations":[{"path":"/usr/libexec/sm-k6/k6-v2","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/usr/libexec/sm-k6/k6-v2","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.60.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6617","versionConstraint":"<0.60.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/net","version":"v0.58.0"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6617","fix":{"state":"fixed","versions":["0.60.0"],"available":[{"date":"2026-10-08","kind":"release","version":"0.60.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-97032","cwe":"CWE-362","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-97032","date":"2026-10-25","epss":0.0049,"percentile":0.41844}],"risk":0.3675,"urls":["https://go.dev/cl/847313","https://go.dev/issue/81867","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847188","description":"HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the other modifies the encoder's table size when handling a SETTINGS frame containing SETTINGS_HEADER_TABLE_SIZE that a client sends. A malicious client can repeatedly send a request while changing the header table size to crash the server."},"relatedVulnerabilities":[{"id":"CVE-2026-97032","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-97032","cwe":"CWE-362","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-97032","date":"2026-10-25","epss":0.0049,"percentile":0.41844}],"urls":["https://go.dev/cl/847188","https://go.dev/cl/847313","https://go.dev/issue/81867","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6617"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-97032","description":"HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the other modifies the encoder's table size when handling a SETTINGS frame containing SETTINGS_HEADER_TABLE_SIZE that a client sends. A malicious client can repeatedly send a request while changing the header table size to crash the server."}]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113101","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113101","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113101","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113101","date":"2026-10-25","epss":0.00448,"percentile":0.38655}],"risk":0.36512,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/560749221"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113101","description":"Use after free in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113184","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113184","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113184","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113184","date":"2026-10-25","epss":0.00443,"percentile":0.38253}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/540068924"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113184","description":"Memory corruption in Scheduling in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113324","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113324","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113324","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113324","date":"2026-10-25","epss":0.00443,"percentile":0.38253}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/563357593"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113324","description":"Use after free in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113183","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113183","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113183","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113183","date":"2026-10-25","epss":0.00443,"percentile":0.38252}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/507227196"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113183","description":"Memory corruption in FedCM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113206","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113206","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113206","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113206","date":"2026-10-25","epss":0.00443,"percentile":0.38252}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/517407917"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113206","description":"Memory corruption in Omnibox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113315","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113315","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113315","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113315","date":"2026-10-25","epss":0.00443,"percentile":0.38252}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553117511"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113315","description":"Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113017","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113017","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113017","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113017","date":"2026-10-25","epss":0.00443,"percentile":0.38251}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553132165"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113017","description":"Use after free in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113298","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113298","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113298","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113298","date":"2026-10-25","epss":0.00443,"percentile":0.38251}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553117374"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113298","description":"Use after free in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113316","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113316","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113316","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113316","date":"2026-10-25","epss":0.00443,"percentile":0.38251}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553140050"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113316","description":"Improper input validation in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113323","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113323","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113323","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113323","date":"2026-10-25","epss":0.00443,"percentile":0.38251}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/480153486"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113323","description":"Use after free in Chrome for iOS in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113015","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113015","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113015","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113015","date":"2026-10-25","epss":0.00443,"percentile":0.3825}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/497408124"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113015","description":"Use after free in Workers in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113018","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113018","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113018","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113018","date":"2026-10-25","epss":0.00443,"percentile":0.3825}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/497072295"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113018","description":"Memory corruption in IME in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113185","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113185","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113185","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113185","date":"2026-10-25","epss":0.00443,"percentile":0.3825}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/517461056"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113185","description":"Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113195","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113195","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113195","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113195","date":"2026-10-25","epss":0.00443,"percentile":0.3825}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/518055043"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113195","description":"Improper input validation in Downloads in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113096","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113096","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113096","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113096","date":"2026-10-25","epss":0.00443,"percentile":0.38249}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562238089"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113096","description":"Memory corruption in Text in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113302","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113302","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113302","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113302","date":"2026-10-25","epss":0.00443,"percentile":0.38249}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/500491981"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113302","description":"Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113305","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113305","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113305","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113305","date":"2026-10-25","epss":0.00443,"percentile":0.38249}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/558464760"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113305","description":"Use after free in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113307","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113307","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113307","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113307","date":"2026-10-25","epss":0.00443,"percentile":0.38248}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/514066180"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113307","description":"Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113308","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113308","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113308","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113308","date":"2026-10-25","epss":0.00443,"percentile":0.38248}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/518102808"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113308","description":"Use after free in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113317","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113317","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113317","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113317","date":"2026-10-25","epss":0.00443,"percentile":0.38248}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/555337558"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113317","description":"Memory corruption in Accessibility in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113318","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113318","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113318","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113318","date":"2026-10-25","epss":0.00443,"percentile":0.38248}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/566136673"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113318","description":"Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113091","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113091","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113091","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113091","date":"2026-10-25","epss":0.00443,"percentile":0.38247}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/497433155"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113091","description":"Use after free in PerformanceAPIs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113319","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113319","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113319","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113319","date":"2026-10-25","epss":0.00443,"percentile":0.38247}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/502689637"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113319","description":"Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113321","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113321","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113321","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113321","date":"2026-10-25","epss":0.00443,"percentile":0.38247}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/513521516"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113321","description":"Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113335","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113335","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113335","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113335","date":"2026-10-25","epss":0.00443,"percentile":0.38246}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/518055882"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113335","description":"Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113337","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113337","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113337","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113337","date":"2026-10-25","epss":0.00443,"percentile":0.38246}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/501680084"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113337","description":"Memory corruption in Scroll in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113339","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113339","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113339","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113339","date":"2026-10-25","epss":0.00443,"percentile":0.38246}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/572862424"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113339","description":"Use after free in SVG in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113019","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113019","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113019","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113019","date":"2026-10-25","epss":0.00443,"percentile":0.38245}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/570003644"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113019","description":"Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113025","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113025","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113025","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113025","date":"2026-10-25","epss":0.00443,"percentile":0.38245}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/533113044"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113025","description":"Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113327","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113327","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113327","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113327","date":"2026-10-25","epss":0.00443,"percentile":0.38245}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/513417142"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113327","description":"Use after free in Chromecast in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113332","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113332","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113332","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113332","date":"2026-10-25","epss":0.00443,"percentile":0.38245}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/517031871"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113332","description":"Memory corruption in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113033","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113033","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113033","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113033","date":"2026-10-25","epss":0.00443,"percentile":0.38244}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/499869964"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113033","description":"Use after free in Streaming in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113311","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113311","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113311","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113311","date":"2026-10-25","epss":0.00443,"percentile":0.38244}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/499365667"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113311","description":"Use after free in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113312","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113312","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113312","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113312","date":"2026-10-25","epss":0.00443,"percentile":0.38244}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/439873332"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113312","description":"Memory corruption in Autofill in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113338","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113338","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113338","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113338","date":"2026-10-25","epss":0.00443,"percentile":0.38244}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/567175125"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113338","description":"Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113012","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113012","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113012","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113012","date":"2026-10-25","epss":0.00443,"percentile":0.38243}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/568215670"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113012","description":"Improper input validation in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113053","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113053","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113053","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113053","date":"2026-10-25","epss":0.00443,"percentile":0.38243}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/40061291"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113053","description":"Use after free in Cookies in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113165","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113165","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113165","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113165","date":"2026-10-25","epss":0.00443,"percentile":0.38243}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553163770"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113165","description":"Use after free in Core in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113192","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113192","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113192","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113192","date":"2026-10-25","epss":0.00443,"percentile":0.38242}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/568831099"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113192","description":"Memory corruption in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113194","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113194","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113194","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113194","date":"2026-10-25","epss":0.00443,"percentile":0.38242}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/513989760"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113194","description":"Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113213","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113213","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113213","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113213","date":"2026-10-25","epss":0.00443,"percentile":0.38242}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/513686739"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113213","description":"Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113214","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113214","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113214","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113214","date":"2026-10-25","epss":0.00443,"percentile":0.38242}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/506148052"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113214","description":"Improper input validation in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113167","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113167","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113167","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113167","date":"2026-10-25","epss":0.00443,"percentile":0.38241}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/513692667"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113167","description":"Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113179","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113179","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113179","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113179","date":"2026-10-25","epss":0.00443,"percentile":0.38241}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/572695599"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113179","description":"Use after free in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113215","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113215","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113215","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113215","date":"2026-10-25","epss":0.00443,"percentile":0.38241}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/40092886"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113215","description":"Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113236","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113236","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113236","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113236","date":"2026-10-25","epss":0.00443,"percentile":0.38241}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553119084"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113236","description":"Use after free in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113158","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113158","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113158","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113158","date":"2026-10-25","epss":0.00443,"percentile":0.3824}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553157579"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113158","description":"Use after free in Streaming in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113160","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113160","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113160","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113160","date":"2026-10-25","epss":0.00443,"percentile":0.3824}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/570203091"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113160","description":"Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113162","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113162","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113162","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113162","date":"2026-10-25","epss":0.00443,"percentile":0.3824}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/513147880"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113162","description":"Improper input validation in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113245","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113245","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113245","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113245","date":"2026-10-25","epss":0.00443,"percentile":0.3824}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/532985249"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113245","description":"Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113168","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113168","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113168","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113168","date":"2026-10-25","epss":0.00443,"percentile":0.38239}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/497593347"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113168","description":"Use after free in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113172","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113172","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113172","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113172","date":"2026-10-25","epss":0.00443,"percentile":0.38239}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/515451922"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113172","description":"Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113174","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113174","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113174","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113174","date":"2026-10-25","epss":0.00443,"percentile":0.38239}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/501419037"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113174","description":"Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113198","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113198","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113198","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113198","date":"2026-10-25","epss":0.00443,"percentile":0.38239}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/498861195"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113198","description":"Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113181","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113181","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113181","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113181","date":"2026-10-25","epss":0.00443,"percentile":0.38238}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/569408568"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113181","description":"Use after free in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113197","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113197","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113197","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113197","date":"2026-10-25","epss":0.00443,"percentile":0.38238}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562230410"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113197","description":"Use after free in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113240","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113240","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113240","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113240","date":"2026-10-25","epss":0.00443,"percentile":0.38238}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/497577345"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113240","description":"Use after free in Chromecast in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113248","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113248","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113248","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113248","date":"2026-10-25","epss":0.00443,"percentile":0.38238}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/554560940"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113248","description":"Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113247","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113247","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113247","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113247","date":"2026-10-25","epss":0.00443,"percentile":0.38237}],"risk":0.361045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/514508203"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113247","description":"Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113254","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113254","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113254","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113254","date":"2026-10-25","epss":0.00434,"percentile":0.37448}],"risk":0.35371,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562955705"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113254","description":"Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113274","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113274","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113274","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113274","date":"2026-10-25","epss":0.00434,"percentile":0.37448}],"risk":0.35371,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/570715681"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113274","description":"Use after free in ReadingMode in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113268","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113268","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113268","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113268","date":"2026-10-25","epss":0.00434,"percentile":0.37447}],"risk":0.35371,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553661952"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113268","description":"Memory corruption in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113238","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113238","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113238","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113238","date":"2026-10-25","epss":0.00433,"percentile":0.37356}],"risk":0.352895,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/513789297"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113238","description":"Memory corruption in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113032","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113032","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113032","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113032","date":"2026-10-25","epss":0.00427,"percentile":0.3665}],"risk":0.34800500000000006,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/541604102"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113032","description":"Memory corruption in Omnibox in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113071","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113071","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113071","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113071","date":"2026-10-25","epss":0.00427,"percentile":0.3665}],"risk":0.34800500000000006,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/514079212"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113071","description":"Use after free in Notifications in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113250","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113250","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113250","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113250","date":"2026-10-25","epss":0.00427,"percentile":0.3665}],"risk":0.34800500000000006,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/490808751"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113250","description":"Use after free in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113063","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113063","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113063","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113063","date":"2026-10-25","epss":0.00426,"percentile":0.36571}],"risk":0.34719,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562960821"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113063","description":"Improper input validation in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113130","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113130","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113130","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113130","date":"2026-10-25","epss":0.00426,"percentile":0.36571}],"risk":0.34719,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/563004214"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113130","description":"Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113132","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113132","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113132","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113132","date":"2026-10-25","epss":0.00426,"percentile":0.3657}],"risk":0.34719,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562953023"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113132","description":"Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113140","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113140","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113140","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113140","date":"2026-10-25","epss":0.00426,"percentile":0.3657}],"risk":0.34719,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/536445815"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113140","description":"Use after free in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113152","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113152","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113152","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113152","date":"2026-10-25","epss":0.00426,"percentile":0.3657}],"risk":0.34719,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/523264945"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113152","description":"Memory corruption in SignIn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113330","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113330","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113330","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113330","date":"2026-10-25","epss":0.00426,"percentile":0.3657}],"risk":0.34719,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/517320634"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113330","description":"Memory corruption in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113039","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113039","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113039","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113039","date":"2026-10-25","epss":0.00426,"percentile":0.36569}],"risk":0.34719,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/566069559"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113039","description":"Use after free in Bookmarks in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113061","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113061","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113061","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113061","date":"2026-10-25","epss":0.00426,"percentile":0.36569}],"risk":0.34719,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/554557866"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113061","description":"Memory corruption in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113241","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113241","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113241","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113241","date":"2026-10-25","epss":0.00426,"percentile":0.36569}],"risk":0.34719,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/514078082"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113241","description":"Memory corruption in Toolbar in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113272","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113272","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113272","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113272","date":"2026-10-25","epss":0.00425,"percentile":0.36538}],"risk":0.34637500000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/513486355"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113272","description":"Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113273","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113273","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113273","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113273","date":"2026-10-25","epss":0.00425,"percentile":0.36538}],"risk":0.34637500000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/561999377"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113273","description":"Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113262","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113262","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113262","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113262","date":"2026-10-25","epss":0.00425,"percentile":0.36537}],"risk":0.34637500000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/517094892"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113262","description":"Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113267","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113267","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113267","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113267","date":"2026-10-25","epss":0.00425,"percentile":0.36537}],"risk":0.34637500000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/559707641"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113267","description":"Memory corruption in Video in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113282","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113282","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113282","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113282","date":"2026-10-25","epss":0.00425,"percentile":0.36537}],"risk":0.34637500000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553160293"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113282","description":"Use after free in Views in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113284","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113284","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113284","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113284","date":"2026-10-25","epss":0.00425,"percentile":0.36537}],"risk":0.34637500000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553121395"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113284","description":"Memory corruption in XML in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113188","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113188","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113188","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113188","date":"2026-10-25","epss":0.00425,"percentile":0.36536}],"risk":0.34637500000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/533122125"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113188","description":"Memory corruption in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113278","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113278","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113278","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113278","date":"2026-10-25","epss":0.00425,"percentile":0.36536}],"risk":0.34637500000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/514080341"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113278","description":"Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113287","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113287","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113287","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113287","date":"2026-10-25","epss":0.00425,"percentile":0.36536}],"risk":0.34637500000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562945664"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113287","description":"Use after free in Prompts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113256","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113256","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113256","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113256","date":"2026-10-25","epss":0.00425,"percentile":0.36535}],"risk":0.34637500000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/498748871"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113256","description":"Use after free in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113257","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113257","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113257","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113257","date":"2026-10-25","epss":0.00425,"percentile":0.36535}],"risk":0.34637500000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/498994634"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113257","description":"Memory corruption in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113258","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113258","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113258","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113258","date":"2026-10-25","epss":0.00425,"percentile":0.36535}],"risk":0.34637500000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562236876"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113258","description":"Memory corruption in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113264","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113264","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113264","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113264","date":"2026-10-25","epss":0.00425,"percentile":0.36535}],"risk":0.34637500000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/501786099"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113264","description":"Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113281","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113281","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113281","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113281","date":"2026-10-25","epss":0.00425,"percentile":0.36534}],"risk":0.34637500000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/498742883"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113281","description":"Memory corruption in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113289","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113289","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113289","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113289","date":"2026-10-25","epss":0.00425,"percentile":0.36534}],"risk":0.34637500000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/511311494"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113289","description":"Improper input validation in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113290","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113290","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113290","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113290","date":"2026-10-25","epss":0.00425,"percentile":0.36534}],"risk":0.34637500000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/506152584"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113290","description":"Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113291","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113291","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113291","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113291","date":"2026-10-25","epss":0.00425,"percentile":0.36534}],"risk":0.34637500000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/514008724"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113291","description":"Memory corruption in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113187","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113187","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113187","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113187","date":"2026-10-25","epss":0.00425,"percentile":0.36533}],"risk":0.34637500000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553845833"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113187","description":"Use after free in DOM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113265","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113265","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113265","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113265","date":"2026-10-25","epss":0.00425,"percentile":0.36533}],"risk":0.34637500000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/520017400"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113265","description":"Memory corruption in BFCache in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113286","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113286","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113286","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113286","date":"2026-10-25","epss":0.00425,"percentile":0.36533}],"risk":0.34637500000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/563183231"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113286","description":"Memory corruption in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113288","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113288","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113288","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113288","date":"2026-10-25","epss":0.00425,"percentile":0.36533}],"risk":0.34637500000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/556213889"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113288","description":"Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113260","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113260","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113260","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113260","date":"2026-10-25","epss":0.00425,"percentile":0.36532}],"risk":0.34637500000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553326035"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113260","description":"Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113275","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113275","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113275","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113275","date":"2026-10-25","epss":0.00425,"percentile":0.36532}],"risk":0.34637500000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/502040109"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113275","description":"Use after free in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113343","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113343","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113343","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113343","date":"2026-10-25","epss":0.00425,"percentile":0.36532}],"risk":0.34637500000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/502376419"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113343","description":"Memory corruption in Sandbox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113344","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113344","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113344","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113344","date":"2026-10-25","epss":0.00425,"percentile":0.36532}],"risk":0.34637500000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/561926123"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113344","description":"Use after free in Performance in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113034","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113034","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113034","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113034","date":"2026-10-25","epss":0.00424,"percentile":0.36411}],"risk":0.34556000000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/497482008"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113034","description":"Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113016","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113016","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113016","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113016","date":"2026-10-25","epss":0.00424,"percentile":0.3641}],"risk":0.34556000000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/523237501"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113016","description":"Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113022","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113022","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113022","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113022","date":"2026-10-25","epss":0.00424,"percentile":0.3641}],"risk":0.34556000000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/494352583"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113022","description":"Memory corruption in PDFium in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113031","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113031","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113031","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113031","date":"2026-10-25","epss":0.00424,"percentile":0.3641}],"risk":0.34556000000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/532939000"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113031","description":"Memory corruption in Media in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113092","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113092","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113092","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113092","date":"2026-10-25","epss":0.00424,"percentile":0.3641}],"risk":0.34556000000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/558377544"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113092","description":"Use after free in Passwords in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113099","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113099","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113099","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113099","date":"2026-10-25","epss":0.00424,"percentile":0.36409}],"risk":0.34556000000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/556227230"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113099","description":"Improper input validation in Omnibox in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-112996","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-112996","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112996","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-112996","date":"2026-10-25","epss":0.00417,"percentile":0.35726}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/563015686"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112996","description":"Memory corruption in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113067","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113067","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113067","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113067","date":"2026-10-25","epss":0.00417,"percentile":0.35725}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562999766"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113067","description":"Use after free in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113075","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113075","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113075","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113075","date":"2026-10-25","epss":0.00417,"percentile":0.35725}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553931271"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113075","description":"Use after free in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113154","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113154","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113154","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113154","date":"2026-10-25","epss":0.00417,"percentile":0.35725}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/569127861"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113154","description":"Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113232","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113232","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113232","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113232","date":"2026-10-25","epss":0.00417,"percentile":0.35725}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/513226023"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113232","description":"Memory corruption in Search in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-112993","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-112993","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112993","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-112993","date":"2026-10-25","epss":0.00417,"percentile":0.35724}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/572893186"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112993","description":"Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113042","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113042","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113042","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113042","date":"2026-10-25","epss":0.00417,"percentile":0.35724}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/517486906"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113042","description":"Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113049","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113049","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113049","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113049","date":"2026-10-25","epss":0.00417,"percentile":0.35724}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/537465180"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113049","description":"Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113100","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113100","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113100","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113100","date":"2026-10-25","epss":0.00417,"percentile":0.35724}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/561787556"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113100","description":"Memory corruption in Audio in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113068","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113068","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113068","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113068","date":"2026-10-25","epss":0.00417,"percentile":0.35723}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/40942045"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113068","description":"Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113155","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113155","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113155","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113155","date":"2026-10-25","epss":0.00417,"percentile":0.35723}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/505994167"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113155","description":"Use after free in Glic in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113173","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113173","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113173","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113173","date":"2026-10-25","epss":0.00417,"percentile":0.35723}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553274389"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113173","description":"Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113207","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113207","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113207","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113207","date":"2026-10-25","epss":0.00417,"percentile":0.35723}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/511806651"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113207","description":"Use after free in SiteIsolation in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113109","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113109","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113109","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113109","date":"2026-10-25","epss":0.00417,"percentile":0.35722}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/495471295"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113109","description":"Memory corruption in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113111","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113111","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113111","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113111","date":"2026-10-25","epss":0.00417,"percentile":0.35722}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/563163857"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113111","description":"Use after free in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113117","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113117","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113117","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113117","date":"2026-10-25","epss":0.00417,"percentile":0.35722}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/563788518"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113117","description":"Improper input validation in ANGLE in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113229","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113229","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113229","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113229","date":"2026-10-25","epss":0.00417,"percentile":0.35722}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/497827101"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113229","description":"Use after free in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113044","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113044","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113044","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113044","date":"2026-10-25","epss":0.00417,"percentile":0.35721}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/559266116"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113044","description":"Use after free in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113097","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113097","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113097","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113097","date":"2026-10-25","epss":0.00417,"percentile":0.35721}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/526039697"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113097","description":"Use after free in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113113","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113113","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113113","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113113","date":"2026-10-25","epss":0.00417,"percentile":0.35721}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/495899355"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113113","description":"Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113114","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113114","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113114","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113114","date":"2026-10-25","epss":0.00417,"percentile":0.35721}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/497087197"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113114","description":"Use after free in SignIn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113000","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113000","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113000","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113000","date":"2026-10-25","epss":0.00417,"percentile":0.3572}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/572598342"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113000","description":"Memory corruption in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113003","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113003","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113003","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113003","date":"2026-10-25","epss":0.00417,"percentile":0.3572}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/505024593"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113003","description":"Memory corruption in HID in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113004","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113004","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113004","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113004","date":"2026-10-25","epss":0.00417,"percentile":0.3572}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/513394775"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113004","description":"Memory corruption in Sync in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113153","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113153","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113153","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113153","date":"2026-10-25","epss":0.00417,"percentile":0.3572}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/561099700"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113153","description":"Memory corruption in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-112997","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-112997","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112997","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-112997","date":"2026-10-25","epss":0.00417,"percentile":0.35719}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/560664595"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112997","description":"Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-112998","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-112998","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112998","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-112998","date":"2026-10-25","epss":0.00417,"percentile":0.35719}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553134101"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112998","description":"Memory corruption in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113110","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113110","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113110","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113110","date":"2026-10-25","epss":0.00417,"percentile":0.35719}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553390794"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113110","description":"Memory corruption in ShadowDOM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113226","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113226","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113226","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113226","date":"2026-10-25","epss":0.00417,"percentile":0.35719}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/523248913"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113226","description":"Memory corruption in Model in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113040","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113040","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113040","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113040","date":"2026-10-25","epss":0.00417,"percentile":0.35718}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/568906040"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113040","description":"Improper input validation in Proxy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113041","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113041","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113041","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113041","date":"2026-10-25","epss":0.00417,"percentile":0.35718}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/524319033"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113041","description":"Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113233","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113233","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113233","cwe":"CWE-125","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113233","date":"2026-10-25","epss":0.00417,"percentile":0.35718}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562111801"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113233","description":"Out of bounds read in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113234","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113234","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113234","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113234","date":"2026-10-25","epss":0.00417,"percentile":0.35718}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/556750158"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113234","description":"Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113001","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113001","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113001","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113001","date":"2026-10-25","epss":0.00417,"percentile":0.35717}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553144392"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113001","description":"Use after free in Workers in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113005","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113005","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113005","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113005","date":"2026-10-25","epss":0.00417,"percentile":0.35717}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/503584859"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113005","description":"Memory corruption in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113008","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113008","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113008","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113008","date":"2026-10-25","epss":0.00417,"percentile":0.35717}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/563089510"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113008","description":"Memory corruption in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113292","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113292","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113292","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113292","date":"2026-10-25","epss":0.00417,"percentile":0.35717}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553248404"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113292","description":"Improper input validation in Omnibox in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113006","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113006","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113006","cwe":"CWE-125","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113006","date":"2026-10-25","epss":0.00417,"percentile":0.35716}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/496650333"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113006","description":"Out of bounds read in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113093","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113093","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113093","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113093","date":"2026-10-25","epss":0.00417,"percentile":0.35716}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/567612004"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113093","description":"Memory corruption in DisplayLocking in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113124","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113124","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113124","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113124","date":"2026-10-25","epss":0.00417,"percentile":0.35716}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553150456"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113124","description":"Memory corruption in DataTransfer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113166","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113166","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113166","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113166","date":"2026-10-25","epss":0.00417,"percentile":0.35716}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/504073211"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113166","description":"Memory corruption in History in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113120","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113120","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113120","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113120","date":"2026-10-25","epss":0.00417,"percentile":0.35715}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/560476932"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113120","description":"Improper input validation in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113123","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113123","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113123","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113123","date":"2026-10-25","epss":0.00417,"percentile":0.35715}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/551930637"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113123","description":"Use after free in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113150","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113150","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113150","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113150","date":"2026-10-25","epss":0.00417,"percentile":0.35715}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/499250086"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113150","description":"Memory corruption in Bindings in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113052","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113052","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113052","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113052","date":"2026-10-25","epss":0.00417,"percentile":0.35714}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/564326756"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113052","description":"Memory corruption in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113065","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113065","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113065","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113065","date":"2026-10-25","epss":0.00417,"percentile":0.35714}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562223549"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113065","description":"Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113108","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113108","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113108","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113108","date":"2026-10-25","epss":0.00417,"percentile":0.35714}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/502299325"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113108","description":"Use after free in Script in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113133","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113133","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113133","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113133","date":"2026-10-25","epss":0.00417,"percentile":0.35714}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/565349184"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113133","description":"Memory corruption in PlatformIntegration in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113104","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113104","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113104","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113104","date":"2026-10-25","epss":0.00417,"percentile":0.35713}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/535749304"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113104","description":"Memory corruption in Frames in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113105","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113105","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113105","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113105","date":"2026-10-25","epss":0.00417,"percentile":0.35713}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/501805751"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113105","description":"Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113094","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113094","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113094","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113094","date":"2026-10-25","epss":0.00417,"percentile":0.35712}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/497494634"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113094","description":"Memory corruption in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113095","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113095","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113095","cwe":"CWE-125","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113095","date":"2026-10-25","epss":0.00417,"percentile":0.35712}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/570167919"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113095","description":"Out of bounds read in Focus in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113106","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113106","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113106","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113106","date":"2026-10-25","epss":0.00417,"percentile":0.35712}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553126587"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113106","description":"Memory corruption in Skia in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113136","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113136","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113136","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113136","date":"2026-10-25","epss":0.00417,"percentile":0.35712}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553114456"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113136","description":"Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113115","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113115","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113115","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113115","date":"2026-10-25","epss":0.00417,"percentile":0.35711}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/514018015"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113115","description":"Use after free in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113125","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113125","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113125","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113125","date":"2026-10-25","epss":0.00417,"percentile":0.35711}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/563819290"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113125","description":"Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113131","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113131","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113131","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113131","date":"2026-10-25","epss":0.00417,"percentile":0.35711}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/500536121"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113131","description":"Memory corruption in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113164","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113164","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113164","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113164","date":"2026-10-25","epss":0.00417,"percentile":0.35711}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/500497398"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113164","description":"Memory corruption in Voice in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113149","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113149","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113149","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113149","date":"2026-10-25","epss":0.00417,"percentile":0.3571}],"risk":0.339855,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/517221283"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113149","description":"Memory corruption in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113276","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113276","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113276","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113276","date":"2026-10-25","epss":0.00416,"percentile":0.35631}],"risk":0.33904,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/517809727"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113276","description":"Memory corruption in Passwords in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"3bfc5b995b5339c1","cpes":["cpe:2.3:a:pixman:pixman:0.46.4-r0:*:*:*:*:*:*:*"],"name":"pixman","purl":"pkg:apk/alpine/pixman@0.46.4-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"0.46.4-r0","language":"","licenses":["MIT"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpixman-1.so.0"},{"path":"/usr/lib/libpixman-1.so.0.46.4"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"pixman"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:pixman:pixman:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2023-37769","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:pixman:pixman:0.46.4:*:*:*:*:*:*:*"],"package":{"name":"pixman","version":"0.46.4-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2023-37769","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-37769","cwe":"CWE-369","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-37769","date":"2026-10-25","epss":0.00586,"percentile":0.47744}],"risk":0.33694999999999997,"urls":["https://gitlab.freedesktop.org/pixman/pixman/-/issues/76"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-37769","description":"stress-test master commit e4c878 was discovered to contain a FPE vulnerability via the component combine_inner at /pixman-combine-float.c."},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113121","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113121","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113121","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113121","date":"2026-10-25","epss":0.00412,"percentile":0.3519}],"risk":0.3357800000000001,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562909956"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113121","description":"Memory corruption in ContextMenu in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"d690b425b757db47","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107695","versionConstraint":"< 8.1.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107695","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107695","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107695","date":"2026-10-25","epss":0.00467,"percentile":0.40136}],"risk":0.33390499999999995,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23618","https://gist.github.com/OxBat/59574a2940092cda1b6e76bbf96f53d0","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n8.1.2/libavformat/hls.c#L866","https://github.com/FFmpeg/FFmpeg/commit/0e6eef35517a","https://github.com/FFmpeg/FFmpeg/commit/a4ddaba8bb78","https://github.com/FFmpeg/FFmpeg/commit/c364ab176f722bdabc886845e770c9eacbc1e3e5","https://www.vulncheck.com/advisories/ffmpeg-before-8.1.3-hls-demuxer-infinite-loop-via-self-referencing-playlist"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107695","description":"FFmpeg before 8.1.3 contains an infinite loop vulnerability in the HLS demuxer that allows remote attackers to cause denial of service because parse_playlist() accepts Master Playlist tags inside Media Playlists. Attackers can trick victims into opening a crafted self-referencing playlist that endlessly adds variants in hls_read_header(), causing unbounded CPU and I/O consumption."},"relatedVulnerabilities":[]},{"artifact":{"id":"243e974ceb6a5245","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107695","versionConstraint":"< 8.1.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107695","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107695","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107695","date":"2026-10-25","epss":0.00467,"percentile":0.40136}],"risk":0.33390499999999995,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23618","https://gist.github.com/OxBat/59574a2940092cda1b6e76bbf96f53d0","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n8.1.2/libavformat/hls.c#L866","https://github.com/FFmpeg/FFmpeg/commit/0e6eef35517a","https://github.com/FFmpeg/FFmpeg/commit/a4ddaba8bb78","https://github.com/FFmpeg/FFmpeg/commit/c364ab176f722bdabc886845e770c9eacbc1e3e5","https://www.vulncheck.com/advisories/ffmpeg-before-8.1.3-hls-demuxer-infinite-loop-via-self-referencing-playlist"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107695","description":"FFmpeg before 8.1.3 contains an infinite loop vulnerability in the HLS demuxer that allows remote attackers to cause denial of service because parse_playlist() accepts Master Playlist tags inside Media Playlists. Attackers can trick victims into opening a crafted self-referencing playlist that endlessly adds variants in hls_read_header(), causing unbounded CPU and I/O consumption."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6896ca1d5ee5394","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107695","versionConstraint":"< 8.1.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107695","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107695","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107695","date":"2026-10-25","epss":0.00467,"percentile":0.40136}],"risk":0.33390499999999995,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23618","https://gist.github.com/OxBat/59574a2940092cda1b6e76bbf96f53d0","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n8.1.2/libavformat/hls.c#L866","https://github.com/FFmpeg/FFmpeg/commit/0e6eef35517a","https://github.com/FFmpeg/FFmpeg/commit/a4ddaba8bb78","https://github.com/FFmpeg/FFmpeg/commit/c364ab176f722bdabc886845e770c9eacbc1e3e5","https://www.vulncheck.com/advisories/ffmpeg-before-8.1.3-hls-demuxer-infinite-loop-via-self-referencing-playlist"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107695","description":"FFmpeg before 8.1.3 contains an infinite loop vulnerability in the HLS demuxer that allows remote attackers to cause denial of service because parse_playlist() accepts Master Playlist tags inside Media Playlists. Attackers can trick victims into opening a crafted self-referencing playlist that endlessly adds variants in hls_read_header(), causing unbounded CPU and I/O consumption."},"relatedVulnerabilities":[]},{"artifact":{"id":"1c27d303595909ee","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107695","versionConstraint":"< 8.1.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107695","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107695","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107695","date":"2026-10-25","epss":0.00467,"percentile":0.40136}],"risk":0.33390499999999995,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23618","https://gist.github.com/OxBat/59574a2940092cda1b6e76bbf96f53d0","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n8.1.2/libavformat/hls.c#L866","https://github.com/FFmpeg/FFmpeg/commit/0e6eef35517a","https://github.com/FFmpeg/FFmpeg/commit/a4ddaba8bb78","https://github.com/FFmpeg/FFmpeg/commit/c364ab176f722bdabc886845e770c9eacbc1e3e5","https://www.vulncheck.com/advisories/ffmpeg-before-8.1.3-hls-demuxer-infinite-loop-via-self-referencing-playlist"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107695","description":"FFmpeg before 8.1.3 contains an infinite loop vulnerability in the HLS demuxer that allows remote attackers to cause denial of service because parse_playlist() accepts Master Playlist tags inside Media Playlists. Attackers can trick victims into opening a crafted self-referencing playlist that endlessly adds variants in hls_read_header(), causing unbounded CPU and I/O consumption."},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-112995","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-112995","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112995","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-112995","date":"2026-10-25","epss":0.00406,"percentile":0.34609}],"risk":0.3308900000000001,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/514447367"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112995","description":"Use after free in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113009","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113009","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113009","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113009","date":"2026-10-25","epss":0.00406,"percentile":0.34609}],"risk":0.3308900000000001,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/514066540"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113009","description":"Use after free in WindowControlsOverlay in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113141","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113141","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113141","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113141","date":"2026-10-25","epss":0.00406,"percentile":0.34609}],"risk":0.3308900000000001,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553128833"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113141","description":"Use after free in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113146","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113146","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113146","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113146","date":"2026-10-25","epss":0.00406,"percentile":0.34609}],"risk":0.3308900000000001,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/511325076"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113146","description":"Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113227","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113227","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113227","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113227","date":"2026-10-25","epss":0.00406,"percentile":0.34608}],"risk":0.3308900000000001,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/563021080"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113227","description":"Use after free in Editing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113060","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113060","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113060","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113060","date":"2026-10-25","epss":0.00406,"percentile":0.34607}],"risk":0.3308900000000001,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/514017698"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113060","description":"Improper input validation in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113175","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113175","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113175","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113175","date":"2026-10-25","epss":0.00404,"percentile":0.34343}],"risk":0.32926000000000005,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/568822820"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113175","description":"Improper input validation in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113176","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113176","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113176","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113176","date":"2026-10-25","epss":0.00404,"percentile":0.34343}],"risk":0.32926000000000005,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/499143720"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113176","description":"Memory corruption in Omnibox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113177","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113177","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113177","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113177","date":"2026-10-25","epss":0.00404,"percentile":0.34343}],"risk":0.32926000000000005,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/559795243"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113177","description":"Use after free in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113200","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113200","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113200","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113200","date":"2026-10-25","epss":0.00404,"percentile":0.34342}],"risk":0.32926000000000005,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/563350676"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113200","description":"Use after free in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113203","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113203","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113203","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113203","date":"2026-10-25","epss":0.00404,"percentile":0.34342}],"risk":0.32926000000000005,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562230438"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113203","description":"Use after free in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113251","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113251","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113251","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113251","date":"2026-10-25","epss":0.00404,"percentile":0.34342}],"risk":0.32926000000000005,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/40056239"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113251","description":"Use after free in PDF in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113028","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113028","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113028","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113028","date":"2026-10-25","epss":0.00404,"percentile":0.3433}],"risk":0.32926000000000005,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/560373976"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113028","description":"Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113219","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113219","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113219","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113219","date":"2026-10-25","epss":0.00404,"percentile":0.3433}],"risk":0.32926000000000005,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/503583985"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113219","description":"Memory corruption in Contacts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113205","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113205","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113205","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113205","date":"2026-10-25","epss":0.00404,"percentile":0.34329}],"risk":0.32926000000000005,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/511820971"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113205","description":"Use after free in Variations in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113208","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113208","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113208","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113208","date":"2026-10-25","epss":0.00404,"percentile":0.34329}],"risk":0.32926000000000005,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/513774784"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113208","description":"Use after free in ContextualSearch in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113216","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113216","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113216","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113216","date":"2026-10-25","epss":0.00404,"percentile":0.34329}],"risk":0.32926000000000005,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/556899544"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113216","description":"Use after free in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113218","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113218","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113218","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113218","date":"2026-10-25","epss":0.00404,"percentile":0.34329}],"risk":0.32926000000000005,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/518003952"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113218","description":"Use after free in DataTransfer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113266","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113266","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113266","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113266","date":"2026-10-25","epss":0.00401,"percentile":0.34041}],"risk":0.326815,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/561499641"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113266","description":"Memory corruption in ANGLE in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"d690b425b757db47","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66036","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66036","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66036","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66036","date":"2026-10-25","epss":0.00401,"percentile":0.34046}],"risk":0.31946333333333327,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66036","description":"FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability in the vf_hqdn3d filter that allows attackers to corrupt heap memory by supplying a crafted video whose frame resolution increases between frames when filtergraph reinitialization is disabled via the -reinit_filter 0 option. Attackers can provide a malicious video input where vf_hqdn3d.config_input() allocates undersized per-plane line-history buffers based on the initial frame width, and subsequent larger frames cause denoise_spatial() to write beyond the allocation boundary, resulting in heap memory corruption."},"relatedVulnerabilities":[]},{"artifact":{"id":"243e974ceb6a5245","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66036","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66036","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66036","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66036","date":"2026-10-25","epss":0.00401,"percentile":0.34046}],"risk":0.31946333333333327,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66036","description":"FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability in the vf_hqdn3d filter that allows attackers to corrupt heap memory by supplying a crafted video whose frame resolution increases between frames when filtergraph reinitialization is disabled via the -reinit_filter 0 option. Attackers can provide a malicious video input where vf_hqdn3d.config_input() allocates undersized per-plane line-history buffers based on the initial frame width, and subsequent larger frames cause denoise_spatial() to write beyond the allocation boundary, resulting in heap memory corruption."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6896ca1d5ee5394","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66036","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66036","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66036","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66036","date":"2026-10-25","epss":0.00401,"percentile":0.34046}],"risk":0.31946333333333327,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66036","description":"FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability in the vf_hqdn3d filter that allows attackers to corrupt heap memory by supplying a crafted video whose frame resolution increases between frames when filtergraph reinitialization is disabled via the -reinit_filter 0 option. Attackers can provide a malicious video input where vf_hqdn3d.config_input() allocates undersized per-plane line-history buffers based on the initial frame width, and subsequent larger frames cause denoise_spatial() to write beyond the allocation boundary, resulting in heap memory corruption."},"relatedVulnerabilities":[]},{"artifact":{"id":"1c27d303595909ee","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66036","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66036","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66036","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66036","date":"2026-10-25","epss":0.00401,"percentile":0.34046}],"risk":0.31946333333333327,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66036","description":"FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability in the vf_hqdn3d filter that allows attackers to corrupt heap memory by supplying a crafted video whose frame resolution increases between frames when filtergraph reinitialization is disabled via the -reinit_filter 0 option. Attackers can provide a malicious video input where vf_hqdn3d.config_input() allocates undersized per-plane line-history buffers based on the initial frame width, and subsequent larger frames cause denoise_spatial() to write beyond the allocation boundary, resulting in heap memory corruption."},"relatedVulnerabilities":[]},{"artifact":{"id":"feb6e072f4cd4421","cpes":["cpe:2.3:a:golang:networking:v0.58.0:*:*:*:*:go:*:*","cpe:2.3:a:golang:net:v0.58.0:*:*:*:*:go:*:*"],"name":"golang.org/x/net","purl":"pkg:golang/golang.org/x/net@v0.58.0","type":"go-module","version":"v0.58.0","language":"go","licenses":[],"metadata":{"h1Digest":"h1:ynWG7rqYi4ccpTEuPZ2QGWHktVEM9DMCj9yzDE0Q7To=","mainModule":"k6","architecture":"amd64","goCompiledVersion":"go1.26.10"},"locations":[{"path":"/usr/libexec/sm-k6/k6-v2","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/usr/libexec/sm-k6/k6-v2","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.60.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6610","versionConstraint":"<0.60.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/net","version":"v0.58.0"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6610","fix":{"state":"fixed","versions":["0.60.0"],"available":[{"date":"2026-10-08","kind":"release","version":"0.60.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78660","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78660","date":"2026-10-25","epss":0.00425,"percentile":0.36529}],"risk":0.31875000000000003,"urls":["https://go.dev/cl/836385","https://go.dev/issue/81115","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/835145","description":"Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a reverse proxy. If the HTTP/1 client also does not behave strictly enough, this can result in response smuggling."},"relatedVulnerabilities":[{"id":"CVE-2026-78660","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78660","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78660","date":"2026-10-25","epss":0.00425,"percentile":0.36529}],"urls":["https://go.dev/cl/835145","https://go.dev/cl/836385","https://go.dev/issue/81115","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6610"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78660","description":"Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a reverse proxy. If the HTTP/1 client also does not behave strictly enough, this can result in response smuggling."}]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113255","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113255","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113255","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113255","date":"2026-10-25","epss":0.0039,"percentile":0.32843}],"risk":0.31784999999999997,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/518065595"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113255","description":"Use after free in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113029","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113029","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113029","cwe":"CWE-284","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113029","date":"2026-10-25","epss":0.00389,"percentile":0.32705}],"risk":0.317035,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/523708661"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113029","description":"Improper access control in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113190","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113190","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113190","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113190","date":"2026-10-25","epss":0.00388,"percentile":0.3259}],"risk":0.31622000000000006,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/514372708"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113190","description":"Use after free in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113191","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113191","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113191","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113191","date":"2026-10-25","epss":0.00388,"percentile":0.32589}],"risk":0.31622000000000006,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/441089142"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113191","description":"Use after free in Internals in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113253","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113253","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113253","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113253","date":"2026-10-25","epss":0.00388,"percentile":0.32589}],"risk":0.31622000000000006,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553117109"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113253","description":"Use after free in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113259","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113259","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113259","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113259","date":"2026-10-25","epss":0.00388,"percentile":0.32589}],"risk":0.31622000000000006,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/554008013"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113259","description":"Use after free in Frames in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113231","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113231","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113231","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113231","date":"2026-10-25","epss":0.0038,"percentile":0.3171}],"risk":0.30970000000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/477664550"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113231","description":"Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113081","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113081","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113081","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113081","date":"2026-10-25","epss":0.0038,"percentile":0.31709}],"risk":0.30970000000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/534956586"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113081","description":"Use after free in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113087","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113087","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113087","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113087","date":"2026-10-25","epss":0.0038,"percentile":0.31709}],"risk":0.30970000000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/558301759"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113087","description":"Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113036","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113036","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113036","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113036","date":"2026-10-25","epss":0.00378,"percentile":0.31466}],"risk":0.30807,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553335083"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113036","description":"Memory corruption in HTML in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113085","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113085","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113085","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113085","date":"2026-10-25","epss":0.00378,"percentile":0.31466}],"risk":0.30807,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/559776316"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113085","description":"Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113059","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113059","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113059","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113059","date":"2026-10-25","epss":0.00373,"percentile":0.30927}],"risk":0.303995,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/513620385"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113059","description":"Memory corruption in Sensor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113118","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113118","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113118","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113118","date":"2026-10-25","epss":0.00373,"percentile":0.30927}],"risk":0.303995,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/513184498"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113118","description":"Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-112999","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-112999","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112999","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-112999","date":"2026-10-25","epss":0.0037,"percentile":0.30632}],"risk":0.30155000000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/513452101"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112999","description":"Use after free in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113221","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113221","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113221","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113221","date":"2026-10-25","epss":0.0037,"percentile":0.30632}],"risk":0.30155000000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/561921279"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113221","description":"Use after free in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113086","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113086","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113086","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113086","date":"2026-10-25","epss":0.0037,"percentile":0.30631}],"risk":0.30155000000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/567673405"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113086","description":"Improper input validation in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113090","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113090","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113090","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113090","date":"2026-10-25","epss":0.0037,"percentile":0.30631}],"risk":0.30155000000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553155133"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113090","description":"Memory corruption in Interstitials in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113112","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113112","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113112","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113112","date":"2026-10-25","epss":0.0037,"percentile":0.30631}],"risk":0.30155000000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/513512147"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113112","description":"Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113135","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113135","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113135","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113135","date":"2026-10-25","epss":0.0037,"percentile":0.30631}],"risk":0.30155000000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/560251733"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113135","description":"Memory corruption in PictureInPicture in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113046","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113046","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113046","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113046","date":"2026-10-25","epss":0.0037,"percentile":0.3063}],"risk":0.30155000000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562999635"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113046","description":"Improper input validation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113062","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113062","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113062","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113062","date":"2026-10-25","epss":0.0037,"percentile":0.3063}],"risk":0.30155000000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562237871"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113062","description":"Improper input validation in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113064","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113064","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113064","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113064","date":"2026-10-25","epss":0.0037,"percentile":0.3063}],"risk":0.30155000000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553146807"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113064","description":"Memory corruption in OptimizationGuide in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113069","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113069","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113069","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113069","date":"2026-10-25","epss":0.0037,"percentile":0.3063}],"risk":0.30155000000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/496644575"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113069","description":"Memory corruption in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113048","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113048","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113048","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113048","date":"2026-10-25","epss":0.0037,"percentile":0.30629}],"risk":0.30155000000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/514445657"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113048","description":"Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"d690b425b757db47","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64833","versionConstraint":">= 0.7.1, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64833","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":4.3,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64833","cwe":"CWE-125","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64833","date":"2026-10-25","epss":0.00396,"percentile":0.33503}],"risk":0.28908,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64833","description":"FFmpeg versions 0.7.1 through 8.1.2 contain an out-of-bounds read vulnerability in the S/PDIF muxer that allows attackers to access memory beyond buffer boundaries by supplying a crafted DTS stream with a core_size value larger than the actual packet length. Attackers can exploit the missing bounds check in the spdif_header_dts4 function by providing a malicious DTS-HD audio stream during S/PDIF re-muxing to trigger unauthorized memory reads beyond the packet buffer."},"relatedVulnerabilities":[]},{"artifact":{"id":"243e974ceb6a5245","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64833","versionConstraint":">= 0.7.1, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64833","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":4.3,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64833","cwe":"CWE-125","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64833","date":"2026-10-25","epss":0.00396,"percentile":0.33503}],"risk":0.28908,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64833","description":"FFmpeg versions 0.7.1 through 8.1.2 contain an out-of-bounds read vulnerability in the S/PDIF muxer that allows attackers to access memory beyond buffer boundaries by supplying a crafted DTS stream with a core_size value larger than the actual packet length. Attackers can exploit the missing bounds check in the spdif_header_dts4 function by providing a malicious DTS-HD audio stream during S/PDIF re-muxing to trigger unauthorized memory reads beyond the packet buffer."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6896ca1d5ee5394","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64833","versionConstraint":">= 0.7.1, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64833","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":4.3,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64833","cwe":"CWE-125","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64833","date":"2026-10-25","epss":0.00396,"percentile":0.33503}],"risk":0.28908,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64833","description":"FFmpeg versions 0.7.1 through 8.1.2 contain an out-of-bounds read vulnerability in the S/PDIF muxer that allows attackers to access memory beyond buffer boundaries by supplying a crafted DTS stream with a core_size value larger than the actual packet length. Attackers can exploit the missing bounds check in the spdif_header_dts4 function by providing a malicious DTS-HD audio stream during S/PDIF re-muxing to trigger unauthorized memory reads beyond the packet buffer."},"relatedVulnerabilities":[]},{"artifact":{"id":"1c27d303595909ee","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64833","versionConstraint":">= 0.7.1, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64833","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":4.3,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64833","cwe":"CWE-125","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64833","date":"2026-10-25","epss":0.00396,"percentile":0.33503}],"risk":0.28908,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64833","description":"FFmpeg versions 0.7.1 through 8.1.2 contain an out-of-bounds read vulnerability in the S/PDIF muxer that allows attackers to access memory beyond buffer boundaries by supplying a crafted DTS stream with a core_size value larger than the actual packet length. Attackers can exploit the missing bounds check in the spdif_header_dts4 function by providing a malicious DTS-HD audio stream during S/PDIF re-muxing to trigger unauthorized memory reads beyond the packet buffer."},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113030","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113030","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113030","cwe":"CWE-284","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113030","date":"2026-10-25","epss":0.00354,"percentile":0.28881}],"risk":0.28851000000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/561660149"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113030","description":"Improper access control in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113228","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113228","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113228","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113228","date":"2026-10-25","epss":0.00337,"percentile":0.26848}],"risk":0.27465500000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/554556700"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113228","description":"Use after free in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"7b9198f90bc527d2","cpes":["cpe:2.3:a:OpenPrinting:cups-libs:2.4.20-r0:*:*:*:*:*:*:*","cpe:2.3:a:OpenPrinting:cups_libs:2.4.20-r0:*:*:*:*:*:*:*","cpe:2.3:a:cups-libs:cups-libs:2.4.20-r0:*:*:*:*:*:*:*","cpe:2.3:a:cups-libs:cups_libs:2.4.20-r0:*:*:*:*:*:*:*","cpe:2.3:a:cups_libs:cups-libs:2.4.20-r0:*:*:*:*:*:*:*","cpe:2.3:a:cups_libs:cups_libs:2.4.20-r0:*:*:*:*:*:*:*","cpe:2.3:a:cups:cups-libs:2.4.20-r0:*:*:*:*:*:*:*","cpe:2.3:a:cups:cups_libs:2.4.20-r0:*:*:*:*:*:*:*"],"name":"cups-libs","purl":"pkg:apk/alpine/cups-libs@2.4.20-r0?arch=x86_64&distro=alpine-3.24.2&upstream=cups","type":"apk","version":"2.4.20-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcups.so.2"},{"path":"/usr/lib/libcupsimage.so.2"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"cups"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:cups:cups:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2018-6553","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:cups:cups:2.4.20:*:*:*:*:*:*:*"],"package":{"name":"cups","version":"2.4.20-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2018-6553","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":6.1,"exploitabilityScore":2.1},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":4.6,"impactScore":6.5,"exploitabilityScore":4},"version":"2.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2018-6553","date":"2026-10-25","epss":0.00385,"percentile":0.32255}],"risk":0.27335,"urls":["https://lists.debian.org/debian-lts-announce/2018/07/msg00014.html","https://security.gentoo.org/glsa/201908-08","https://usn.ubuntu.com/usn/usn-3713-1","https://www.debian.org/security/2018/dsa-4243"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-6553","description":"The CUPS AppArmor profile incorrectly confined the dnssd backend due to use of hard links. A local attacker could possibly use this issue to escape confinement. This flaw affects versions prior to 2.2.7-1ubuntu2.1 in Ubuntu 18.04 LTS, prior to 2.2.4-7ubuntu3.1 in Ubuntu 17.10, prior to 2.1.3-4ubuntu0.5 in Ubuntu 16.04 LTS, and prior to 1.7.2-0ubuntu1.10 in Ubuntu 14.04 LTS."},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113057","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113057","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113057","cwe":"CWE-284","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113057","date":"2026-10-25","epss":0.00334,"percentile":0.26481}],"risk":0.27221,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/502710681"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113057","description":"Improper access control in ComputePressure in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"d690b425b757db47","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64832","versionConstraint":">= 4.4, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64832","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64832","cwe":"CWE-415","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64832","date":"2026-10-25","epss":0.00335,"percentile":0.26599}],"risk":0.27218749999999997,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664","https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64832","description":"FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC hardware decoder within libavcodec/nvdec.c that allows attackers to trigger memory corruption by supplying a crafted video file. When no decoder surfaces remain, the ff_nvdec_start_frame_sep_ref error path frees memory via nvdec_fdd_priv_free while the calling layer subsequently frees the same frame description data, resulting in a double-free of the underlying decoder context in any FFmpeg-based application using NVDEC hardware-accelerated decoding."},"relatedVulnerabilities":[]},{"artifact":{"id":"243e974ceb6a5245","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64832","versionConstraint":">= 4.4, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64832","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64832","cwe":"CWE-415","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64832","date":"2026-10-25","epss":0.00335,"percentile":0.26599}],"risk":0.27218749999999997,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664","https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64832","description":"FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC hardware decoder within libavcodec/nvdec.c that allows attackers to trigger memory corruption by supplying a crafted video file. When no decoder surfaces remain, the ff_nvdec_start_frame_sep_ref error path frees memory via nvdec_fdd_priv_free while the calling layer subsequently frees the same frame description data, resulting in a double-free of the underlying decoder context in any FFmpeg-based application using NVDEC hardware-accelerated decoding."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6896ca1d5ee5394","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64832","versionConstraint":">= 4.4, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64832","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64832","cwe":"CWE-415","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64832","date":"2026-10-25","epss":0.00335,"percentile":0.26599}],"risk":0.27218749999999997,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664","https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64832","description":"FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC hardware decoder within libavcodec/nvdec.c that allows attackers to trigger memory corruption by supplying a crafted video file. When no decoder surfaces remain, the ff_nvdec_start_frame_sep_ref error path frees memory via nvdec_fdd_priv_free while the calling layer subsequently frees the same frame description data, resulting in a double-free of the underlying decoder context in any FFmpeg-based application using NVDEC hardware-accelerated decoding."},"relatedVulnerabilities":[]},{"artifact":{"id":"1c27d303595909ee","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64832","versionConstraint":">= 4.4, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64832","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64832","cwe":"CWE-415","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64832","date":"2026-10-25","epss":0.00335,"percentile":0.26599}],"risk":0.27218749999999997,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664","https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64832","description":"FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC hardware decoder within libavcodec/nvdec.c that allows attackers to trigger memory corruption by supplying a crafted video file. When no decoder surfaces remain, the ff_nvdec_start_frame_sep_ref error path frees memory via nvdec_fdd_priv_free while the calling layer subsequently frees the same frame description data, resulting in a double-free of the underlying decoder context in any FFmpeg-based application using NVDEC hardware-accelerated decoding."},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113143","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113143","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113143","cwe":"CWE-119","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113143","date":"2026-10-25","epss":0.00325,"percentile":0.25348}],"risk":0.264875,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/563352451"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113143","description":"Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113128","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113128","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113128","cwe":"CWE-862","type":"Primary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113128","date":"2026-10-25","epss":0.0032,"percentile":0.24757}],"risk":0.26080000000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/537109293"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113128","description":"Missing authorization in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"d690b425b757db47","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107696","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107696","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107696","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107696","date":"2026-10-25","epss":0.00359,"percentile":0.29393}],"risk":0.256685,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24902","https://gist.github.com/OxBat/648a0bd60c898f2ffb418e131ce26013","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/rtsp.c#L2225","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-infinite-loop-via-rtsp-redirect-handling-in-rtsp-c"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107696","description":"FFmpeg through 9.0.2 contains an infinite loop vulnerability in ff_rtsp_connect() in libavformat/rtsp.c that follows RTSP 3xx redirects without any redirect limit. Attackers controlling an RTSP server can answer every request with a 302 redirect to itself or another server, causing endless reconnects that saturate a CPU core."},"relatedVulnerabilities":[]},{"artifact":{"id":"243e974ceb6a5245","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107696","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107696","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107696","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107696","date":"2026-10-25","epss":0.00359,"percentile":0.29393}],"risk":0.256685,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24902","https://gist.github.com/OxBat/648a0bd60c898f2ffb418e131ce26013","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/rtsp.c#L2225","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-infinite-loop-via-rtsp-redirect-handling-in-rtsp-c"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107696","description":"FFmpeg through 9.0.2 contains an infinite loop vulnerability in ff_rtsp_connect() in libavformat/rtsp.c that follows RTSP 3xx redirects without any redirect limit. Attackers controlling an RTSP server can answer every request with a 302 redirect to itself or another server, causing endless reconnects that saturate a CPU core."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6896ca1d5ee5394","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107696","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107696","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107696","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107696","date":"2026-10-25","epss":0.00359,"percentile":0.29393}],"risk":0.256685,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24902","https://gist.github.com/OxBat/648a0bd60c898f2ffb418e131ce26013","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/rtsp.c#L2225","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-infinite-loop-via-rtsp-redirect-handling-in-rtsp-c"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107696","description":"FFmpeg through 9.0.2 contains an infinite loop vulnerability in ff_rtsp_connect() in libavformat/rtsp.c that follows RTSP 3xx redirects without any redirect limit. Attackers controlling an RTSP server can answer every request with a 302 redirect to itself or another server, causing endless reconnects that saturate a CPU core."},"relatedVulnerabilities":[]},{"artifact":{"id":"1c27d303595909ee","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107696","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107696","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107696","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107696","date":"2026-10-25","epss":0.00359,"percentile":0.29393}],"risk":0.256685,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24902","https://gist.github.com/OxBat/648a0bd60c898f2ffb418e131ce26013","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/rtsp.c#L2225","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-infinite-loop-via-rtsp-redirect-handling-in-rtsp-c"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107696","description":"FFmpeg through 9.0.2 contains an infinite loop vulnerability in ff_rtsp_connect() in libavformat/rtsp.c that follows RTSP 3xx redirects without any redirect limit. Attackers controlling an RTSP server can answer every request with a 302 redirect to itself or another server, causing endless reconnects that saturate a CPU core."},"relatedVulnerabilities":[]},{"artifact":{"id":"5072120da1bad992","cpes":["cpe:2.3:a:DaveGamble:cjson:1.7.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cjson:cjson:1.7.19-r1:*:*:*:*:*:*:*"],"name":"cjson","purl":"pkg:apk/alpine/cjson@1.7.19-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"1.7.19-r1","language":"","licenses":["MIT"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcjson.so.1"},{"path":"/usr/lib/libcjson.so.1.7.19"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"cjson"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:davegamble:cjson:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-16554","versionConstraint":"= 1.7.19 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:DaveGamble:cjson:1.7.19:*:*:*:*:*:*:*"],"package":{"name":"cjson","version":"1.7.19-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-16554","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cvd@cert.pl","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-16554","cwe":"CWE-190","type":"Secondary","source":"cvd@cert.pl"}],"epss":[{"cve":"CVE-2026-16554","date":"2026-10-25","epss":0.00367,"percentile":0.30273}],"risk":0.2559825,"urls":["https://cert.pl/en/posts/2026/07/CVE-2026-16554","https://github.com/DaveGamble/cJSON","http://www.openwall.com/lists/oss-security/2026/07/30/26","http://www.openwall.com/lists/oss-security/2026/07/31/4"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-16554","description":"cJSON library is vulnerable to an integer overflow in the print_string_ptr() function in cJSON.c on 32-bit platforms. The escape_characters counter, a 32-bit size_t, can wrap around when processing strings containing approximately 858,993,460 or more control characters, causing the output buffer to be allocated based on an underestimated length. When cJSON_PrintBuffered() is used with a pre-allocated buffer, the subsequent write loop overflows the heap allocation. An attacker supplying a crafted JSON string to an application using cJSON on a 32-bit platform can cause a heap buffer overflow, potentially leading to remote code execution, information disclosure, or denial of service.\n\n\n\n\nBecause project creator contact attempts were unsuccessful, the vulnerability has only been confirmed in version 1.7.19 but may also affect other versions."},"relatedVulnerabilities":[]},{"artifact":{"id":"d690b425b757db47","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66039","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66039","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66039","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-66039","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66039","date":"2026-10-25","epss":0.00307,"percentile":0.23287}],"risk":0.24457666666666666,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631","https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66039","description":"FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability in the MACE6 audio decoder that allows attackers to corrupt heap memory by supplying a crafted CAF file with a malicious bytes_per_packet value. Attackers can craft a CAF file with oversized bytes_per_packet and frames_per_packet values in the desc chunk to trigger an integer overflow in mace_decode_frame() during output sample count computation, resulting in an undersized buffer allocation and heap out-of-bounds write that could enable code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"243e974ceb6a5245","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66039","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66039","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66039","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-66039","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66039","date":"2026-10-25","epss":0.00307,"percentile":0.23287}],"risk":0.24457666666666666,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631","https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66039","description":"FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability in the MACE6 audio decoder that allows attackers to corrupt heap memory by supplying a crafted CAF file with a malicious bytes_per_packet value. Attackers can craft a CAF file with oversized bytes_per_packet and frames_per_packet values in the desc chunk to trigger an integer overflow in mace_decode_frame() during output sample count computation, resulting in an undersized buffer allocation and heap out-of-bounds write that could enable code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6896ca1d5ee5394","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66039","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66039","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66039","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-66039","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66039","date":"2026-10-25","epss":0.00307,"percentile":0.23287}],"risk":0.24457666666666666,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631","https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66039","description":"FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability in the MACE6 audio decoder that allows attackers to corrupt heap memory by supplying a crafted CAF file with a malicious bytes_per_packet value. Attackers can craft a CAF file with oversized bytes_per_packet and frames_per_packet values in the desc chunk to trigger an integer overflow in mace_decode_frame() during output sample count computation, resulting in an undersized buffer allocation and heap out-of-bounds write that could enable code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"1c27d303595909ee","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66039","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66039","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66039","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-66039","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66039","date":"2026-10-25","epss":0.00307,"percentile":0.23287}],"risk":0.24457666666666666,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631","https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66039","description":"FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability in the MACE6 audio decoder that allows attackers to corrupt heap memory by supplying a crafted CAF file with a malicious bytes_per_packet value. Attackers can craft a CAF file with oversized bytes_per_packet and frames_per_packet values in the desc chunk to trigger an integer overflow in mace_decode_frame() during output sample count computation, resulting in an undersized buffer allocation and heap out-of-bounds write that could enable code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"5072120da1bad992","cpes":["cpe:2.3:a:DaveGamble:cjson:1.7.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cjson:cjson:1.7.19-r1:*:*:*:*:*:*:*"],"name":"cjson","purl":"pkg:apk/alpine/cjson@1.7.19-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"1.7.19-r1","language":"","licenses":["MIT"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcjson.so.1"},{"path":"/usr/lib/libcjson.so.1.7.19"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"cjson"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:davegamble:cjson:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-67217","versionConstraint":"<= 1.7.19 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:DaveGamble:cjson:1.7.19:*:*:*:*:*:*:*"],"package":{"name":"cjson","version":"1.7.19-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-67217","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-67217","cwe":"CWE-696","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-67217","date":"2026-10-25","epss":0.00433,"percentile":0.37293}],"risk":0.24031499999999997,"urls":["https://github.com/DaveGamble/cJSON/blob/v1.7.19/cJSON_Utils.c#L887-L948","https://joshua.hu/cjson-json-parser-cve-vulnerabilities","https://www.vulncheck.com/advisories/cjson-json-patch-non-atomic-application-destroys-data-before-validation"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-67217","description":"cJSON through 1.7.19 applies RFC 6902 JSON Patch operations non-atomically in apply_patch() in cJSON_Utils.c. For a replace operation that is missing its value member, or a move operation whose destination path cannot be resolved, the existing target member is detached and deleted before the operation is fully validated, so the target document is mutated while cJSONUtils_ApplyPatches() or cJSONUtils_ApplyPatchesCaseSensitive() returns a failure status. An attacker who can supply the patch document can destroy addressable members of the target document even though the API reports that the patch failed, defeating the all-or-nothing behavior callers rely on to reject bad patches."},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113137","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113137","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113137","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113137","date":"2026-10-25","epss":0.00313,"percentile":0.23941}],"risk":0.2370975,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/513758047"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113137","description":"Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"d690b425b757db47","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-65703","versionConstraint":">= 2.7, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-65703","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-65703","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-65703","date":"2026-10-25","epss":0.00292,"percentile":0.21525}],"risk":0.22849,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/fd3ee52fab34d98a95b787d0b5ff45685766200c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23773","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-tdsc-video-decoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-65703","description":"FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video decoder that allows remote attackers to cause heap corruption by supplying a crafted AVI file that changes frame dimensions across TDSF frames. The tdsc_parse_tdsf() function fails to unreference the existing reference frame before calling av_frame_get_buffer(), causing tdsc_blit() and tdsc_yuv2rgb() to write attacker-controlled pixel data beyond the end of the undersized reference frame buffer, resulting in a process crash and potential code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"243e974ceb6a5245","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-65703","versionConstraint":">= 2.7, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-65703","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-65703","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-65703","date":"2026-10-25","epss":0.00292,"percentile":0.21525}],"risk":0.22849,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/fd3ee52fab34d98a95b787d0b5ff45685766200c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23773","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-tdsc-video-decoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-65703","description":"FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video decoder that allows remote attackers to cause heap corruption by supplying a crafted AVI file that changes frame dimensions across TDSF frames. The tdsc_parse_tdsf() function fails to unreference the existing reference frame before calling av_frame_get_buffer(), causing tdsc_blit() and tdsc_yuv2rgb() to write attacker-controlled pixel data beyond the end of the undersized reference frame buffer, resulting in a process crash and potential code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6896ca1d5ee5394","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-65703","versionConstraint":">= 2.7, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-65703","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-65703","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-65703","date":"2026-10-25","epss":0.00292,"percentile":0.21525}],"risk":0.22849,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/fd3ee52fab34d98a95b787d0b5ff45685766200c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23773","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-tdsc-video-decoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-65703","description":"FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video decoder that allows remote attackers to cause heap corruption by supplying a crafted AVI file that changes frame dimensions across TDSF frames. The tdsc_parse_tdsf() function fails to unreference the existing reference frame before calling av_frame_get_buffer(), causing tdsc_blit() and tdsc_yuv2rgb() to write attacker-controlled pixel data beyond the end of the undersized reference frame buffer, resulting in a process crash and potential code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"1c27d303595909ee","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-65703","versionConstraint":">= 2.7, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-65703","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-65703","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-65703","date":"2026-10-25","epss":0.00292,"percentile":0.21525}],"risk":0.22849,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/fd3ee52fab34d98a95b787d0b5ff45685766200c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23773","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-tdsc-video-decoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-65703","description":"FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video decoder that allows remote attackers to cause heap corruption by supplying a crafted AVI file that changes frame dimensions across TDSF frames. The tdsc_parse_tdsf() function fails to unreference the existing reference frame before calling av_frame_get_buffer(), causing tdsc_blit() and tdsc_yuv2rgb() to write attacker-controlled pixel data beyond the end of the undersized reference frame buffer, resulting in a process crash and potential code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113142","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113142","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113142","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113142","date":"2026-10-25","epss":0.00382,"percentile":0.31921}],"risk":0.21964999999999996,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/498733953","https://issues.chromium.org/498733953#attachment75108978"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113142","description":"Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"d690b425b757db47","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66037","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66037","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66037","cwe":"CWE-770","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66037","date":"2026-10-25","epss":0.00349,"percentile":0.28268}],"risk":0.19834833333333335,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/86708357d126af84c16f80d9c57335d1e8c845c5","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23627","https://www.vulncheck.com/advisories/ffmpeg-iamf-demuxer-uncontrolled-resource-consumption-via-mix-presentation-obu"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66037","description":"FFmpeg through 8.1.2, fixed in commit 5d7112c, contains an uncontrolled resource consumption vulnerability in the IAMF demuxer that allows an unauthenticated attacker to cause multi-gigabyte memory allocation from a 17-byte input file by supplying a crafted count_label field. The mix_presentation_obu() function in libavformat/iamf_parse.c calls av_calloc(count_label, sizeof(*language_label)) with an attacker-controlled value before validating available OBU data, enabling an allocation amplification of approximately 126 million bytes per input byte that exhausts process memory or triggers an OOM-kill during format probing."},"relatedVulnerabilities":[]},{"artifact":{"id":"243e974ceb6a5245","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66037","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66037","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66037","cwe":"CWE-770","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66037","date":"2026-10-25","epss":0.00349,"percentile":0.28268}],"risk":0.19834833333333335,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/86708357d126af84c16f80d9c57335d1e8c845c5","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23627","https://www.vulncheck.com/advisories/ffmpeg-iamf-demuxer-uncontrolled-resource-consumption-via-mix-presentation-obu"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66037","description":"FFmpeg through 8.1.2, fixed in commit 5d7112c, contains an uncontrolled resource consumption vulnerability in the IAMF demuxer that allows an unauthenticated attacker to cause multi-gigabyte memory allocation from a 17-byte input file by supplying a crafted count_label field. The mix_presentation_obu() function in libavformat/iamf_parse.c calls av_calloc(count_label, sizeof(*language_label)) with an attacker-controlled value before validating available OBU data, enabling an allocation amplification of approximately 126 million bytes per input byte that exhausts process memory or triggers an OOM-kill during format probing."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6896ca1d5ee5394","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66037","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66037","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66037","cwe":"CWE-770","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66037","date":"2026-10-25","epss":0.00349,"percentile":0.28268}],"risk":0.19834833333333335,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/86708357d126af84c16f80d9c57335d1e8c845c5","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23627","https://www.vulncheck.com/advisories/ffmpeg-iamf-demuxer-uncontrolled-resource-consumption-via-mix-presentation-obu"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66037","description":"FFmpeg through 8.1.2, fixed in commit 5d7112c, contains an uncontrolled resource consumption vulnerability in the IAMF demuxer that allows an unauthenticated attacker to cause multi-gigabyte memory allocation from a 17-byte input file by supplying a crafted count_label field. The mix_presentation_obu() function in libavformat/iamf_parse.c calls av_calloc(count_label, sizeof(*language_label)) with an attacker-controlled value before validating available OBU data, enabling an allocation amplification of approximately 126 million bytes per input byte that exhausts process memory or triggers an OOM-kill during format probing."},"relatedVulnerabilities":[]},{"artifact":{"id":"1c27d303595909ee","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66037","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66037","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66037","cwe":"CWE-770","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66037","date":"2026-10-25","epss":0.00349,"percentile":0.28268}],"risk":0.19834833333333335,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/86708357d126af84c16f80d9c57335d1e8c845c5","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23627","https://www.vulncheck.com/advisories/ffmpeg-iamf-demuxer-uncontrolled-resource-consumption-via-mix-presentation-obu"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66037","description":"FFmpeg through 8.1.2, fixed in commit 5d7112c, contains an uncontrolled resource consumption vulnerability in the IAMF demuxer that allows an unauthenticated attacker to cause multi-gigabyte memory allocation from a 17-byte input file by supplying a crafted count_label field. The mix_presentation_obu() function in libavformat/iamf_parse.c calls av_calloc(count_label, sizeof(*language_label)) with an attacker-controlled value before validating available OBU data, enabling an allocation amplification of approximately 126 million bytes per input byte that exhausts process memory or triggers an OOM-kill during format probing."},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113237","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113237","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113237","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113237","date":"2026-10-25","epss":0.00341,"percentile":0.27315}],"risk":0.19607499999999997,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562978160"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113237","description":"Memory corruption in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113246","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113246","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113246","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113246","date":"2026-10-25","epss":0.00341,"percentile":0.27315}],"risk":0.19607499999999997,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/523705767"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113246","description":"Memory corruption in iOSWebView in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113296","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113296","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113296","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113296","date":"2026-10-25","epss":0.00341,"percentile":0.27315}],"risk":0.19607499999999997,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/524316342"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113296","description":"Memory corruption in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113322","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113322","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113322","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113322","date":"2026-10-25","epss":0.00341,"percentile":0.27314}],"risk":0.19607499999999997,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/536639352"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113322","description":"Memory corruption in Dawn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113333","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113333","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113333","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113333","date":"2026-10-25","epss":0.00341,"percentile":0.27314}],"risk":0.19607499999999997,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/501370810"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113333","description":"Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113045","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113045","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113045","cwe":"CWE-125","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113045","date":"2026-10-25","epss":0.00341,"percentile":0.27313}],"risk":0.19607499999999997,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/514040146"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113045","description":"Out of bounds read in Offline in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113026","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113026","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113026","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113026","date":"2026-10-25","epss":0.00341,"percentile":0.27312}],"risk":0.19607499999999997,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/500173014"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113026","description":"Memory corruption in PDF in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113309","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113309","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113309","cwe":"CWE-125","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113309","date":"2026-10-25","epss":0.00341,"percentile":0.27312}],"risk":0.19607499999999997,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/568831768"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113309","description":"Out of bounds read in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113310","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113310","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113310","cwe":"CWE-125","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113310","date":"2026-10-25","epss":0.00341,"percentile":0.27312}],"risk":0.19607499999999997,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/566687517"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113310","description":"Out of bounds read in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113325","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113325","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113325","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113325","date":"2026-10-25","epss":0.00341,"percentile":0.27312}],"risk":0.19607499999999997,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/518088604"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113325","description":"Memory corruption in SignIn in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113341","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113341","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113341","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113341","date":"2026-10-25","epss":0.00339,"percentile":0.2713}],"risk":0.194925,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/569165786"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113341","description":"Memory corruption in Skia in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113329","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113329","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113329","cwe":"CWE-125","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113329","date":"2026-10-25","epss":0.00335,"percentile":0.26667}],"risk":0.192625,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/520429499"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113329","description":"Out of bounds read in Installer in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113122","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113122","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113122","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113122","date":"2026-10-25","epss":0.0033,"percentile":0.25865}],"risk":0.18974999999999997,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/563016452"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113122","description":"Memory corruption in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113066","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113066","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113066","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113066","date":"2026-10-25","epss":0.0033,"percentile":0.25864}],"risk":0.18974999999999997,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562223550"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113066","description":"Memory corruption in Fonts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113098","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113098","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113098","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113098","date":"2026-10-25","epss":0.0033,"percentile":0.25864}],"risk":0.18974999999999997,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/548989584"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113098","description":"Memory corruption in CacheStorage in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113102","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113102","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113102","cwe":"CWE-125","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113102","date":"2026-10-25","epss":0.0033,"percentile":0.25864}],"risk":0.18974999999999997,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/497965748"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113102","description":"Out of bounds read in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113151","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113151","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113151","cwe":"CWE-125","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113151","date":"2026-10-25","epss":0.0033,"percentile":0.25864}],"risk":0.18974999999999997,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/560157609"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113151","description":"Out of bounds read in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113002","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113002","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113002","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113002","date":"2026-10-25","epss":0.0033,"percentile":0.25863}],"risk":0.18974999999999997,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562225226"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113002","description":"Memory corruption in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113047","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113047","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113047","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113047","date":"2026-10-25","epss":0.0033,"percentile":0.25863}],"risk":0.18974999999999997,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553267541"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113047","description":"Memory corruption in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113054","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113054","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113054","cwe":"CWE-125","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113054","date":"2026-10-25","epss":0.0033,"percentile":0.25863}],"risk":0.18974999999999997,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/549529981"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113054","description":"Out of bounds read in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113225","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113225","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113225","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113225","date":"2026-10-25","epss":0.0033,"percentile":0.25863}],"risk":0.18974999999999997,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562109703"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113225","description":"Memory corruption in Browser in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113038","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113038","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113038","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113038","date":"2026-10-25","epss":0.0033,"percentile":0.25862}],"risk":0.18974999999999997,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553931056"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113038","description":"Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113223","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113223","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113223","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113223","date":"2026-10-25","epss":0.0033,"percentile":0.25862}],"risk":0.18974999999999997,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/513735940"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113223","description":"Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113159","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113159","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113159","cwe":"CWE-284","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113159","date":"2026-10-25","epss":0.00328,"percentile":0.25684}],"risk":0.1886,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562041808"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113159","description":"Improper access control in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113297","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113297","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113297","cwe":"CWE-284","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113297","date":"2026-10-25","epss":0.00328,"percentile":0.25684}],"risk":0.1886,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562237117"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113297","description":"Improper access control in Ozone in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113178","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113178","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113178","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113178","date":"2026-10-25","epss":0.00321,"percentile":0.24878}],"risk":0.184575,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/553163820"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113178","description":"Memory corruption in Views in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113199","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113199","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113199","cwe":"CWE-125","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113199","date":"2026-10-25","epss":0.00321,"percentile":0.24878}],"risk":0.184575,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562226316"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113199","description":"Out of bounds read in Payments in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113201","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113201","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113201","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113201","date":"2026-10-25","epss":0.00321,"percentile":0.24878}],"risk":0.184575,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/503665813"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113201","description":"Memory corruption in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113193","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113193","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113193","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113193","date":"2026-10-25","epss":0.00321,"percentile":0.24877}],"risk":0.184575,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/559932543"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113193","description":"Memory corruption in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113277","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113277","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113277","cwe":"CWE-125","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113277","date":"2026-10-25","epss":0.00316,"percentile":0.24336}],"risk":0.18169999999999997,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/552951369"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113277","description":"Out of bounds read in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"fef07e9c95ea2bda","cpes":["cpe:2.3:a:busybox:busybox:1.37.0-r31:*:*:*:*:*:*:*"],"name":"busybox","purl":"pkg:apk/alpine/busybox@1.37.0-r31?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"1.37.0-r31","language":"","licenses":["GPL-2.0-only"],"metadata":{"Arch":"x86_64","files":[{"path":"/bin"},{"path":"/bin/busybox"},{"path":"/etc"},{"path":"/etc/securetty"},{"path":"/etc/busybox-paths.d"},{"path":"/etc/busybox-paths.d/busybox"},{"path":"/etc/logrotate.d"},{"path":"/etc/logrotate.d/acpid"},{"path":"/etc/network"},{"path":"/etc/network/if-down.d"},{"path":"/etc/network/if-post-down.d"},{"path":"/etc/network/if-post-up.d"},{"path":"/etc/network/if-pre-down.d"},{"path":"/etc/network/if-pre-up.d"},{"path":"/etc/network/if-up.d"},{"path":"/etc/network/if-up.d/dad"},{"path":"/etc/udhcpc"},{"path":"/etc/udhcpc/udhcpc.conf"},{"path":"/sbin"},{"path":"/usr"},{"path":"/usr/sbin"},{"path":"/usr/share"},{"path":"/usr/share/udhcpc"},{"path":"/usr/share/udhcpc/default.script"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"busybox"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-60876","versionConstraint":"<= 1.37.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:busybox:busybox:1.37.0:*:*:*:*:*:*:*"],"package":{"name":"busybox","version":"1.37.0-r31"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-60876","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-60876","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-60876","date":"2026-10-25","epss":0.00312,"percentile":0.23868}],"risk":0.17939999999999998,"urls":["https://gist.github.com/subyumatest/41554af6a72aedaacaec026adc311092","https://lists.busybox.net/pipermail/busybox/attachments/20250823/ccdc96ef/attachment-0001.htm","https://lists.busybox.net/pipermail/busybox/attachments/20250828/e7f90492/attachment.htm","https://cert-portal.siemens.com/productcert/html/ssa-253495.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-60876","description":"BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20)."},"relatedVulnerabilities":[]},{"artifact":{"id":"915155597fcdee9a","cpes":["cpe:2.3:a:busybox-binsh:busybox-binsh:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:busybox-binsh:busybox_binsh:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:busybox_binsh:busybox-binsh:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:busybox_binsh:busybox_binsh:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:busybox:busybox-binsh:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:busybox:busybox_binsh:1.37.0-r31:*:*:*:*:*:*:*"],"name":"busybox-binsh","purl":"pkg:apk/alpine/busybox-binsh@1.37.0-r31?arch=x86_64&distro=alpine-3.24.2&upstream=busybox","type":"apk","version":"1.37.0-r31","language":"","licenses":["GPL-2.0-only"],"metadata":{"Arch":"x86_64","files":[{"path":"/bin"},{"path":"/bin/sh"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"busybox"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-60876","versionConstraint":"<= 1.37.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:busybox:busybox:1.37.0:*:*:*:*:*:*:*"],"package":{"name":"busybox","version":"1.37.0-r31"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-60876","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-60876","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-60876","date":"2026-10-25","epss":0.00312,"percentile":0.23868}],"risk":0.17939999999999998,"urls":["https://gist.github.com/subyumatest/41554af6a72aedaacaec026adc311092","https://lists.busybox.net/pipermail/busybox/attachments/20250823/ccdc96ef/attachment-0001.htm","https://lists.busybox.net/pipermail/busybox/attachments/20250828/e7f90492/attachment.htm","https://cert-portal.siemens.com/productcert/html/ssa-253495.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-60876","description":"BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20)."},"relatedVulnerabilities":[]},{"artifact":{"id":"8a9ef44e1018f213","cpes":["cpe:2.3:a:ssl-client:ssl-client:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:ssl-client:ssl_client:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:ssl_client:ssl-client:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:ssl_client:ssl_client:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:ssl:ssl-client:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:ssl:ssl_client:1.37.0-r31:*:*:*:*:*:*:*"],"name":"ssl_client","purl":"pkg:apk/alpine/ssl_client@1.37.0-r31?arch=x86_64&distro=alpine-3.24.2&upstream=busybox","type":"apk","version":"1.37.0-r31","language":"","licenses":["GPL-2.0-only"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/ssl_client"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"busybox"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-60876","versionConstraint":"<= 1.37.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:busybox:busybox:1.37.0:*:*:*:*:*:*:*"],"package":{"name":"busybox","version":"1.37.0-r31"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-60876","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-60876","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-60876","date":"2026-10-25","epss":0.00312,"percentile":0.23868}],"risk":0.17939999999999998,"urls":["https://gist.github.com/subyumatest/41554af6a72aedaacaec026adc311092","https://lists.busybox.net/pipermail/busybox/attachments/20250823/ccdc96ef/attachment-0001.htm","https://lists.busybox.net/pipermail/busybox/attachments/20250828/e7f90492/attachment.htm","https://cert-portal.siemens.com/productcert/html/ssa-253495.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-60876","description":"BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20)."},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113139","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113139","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113139","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113139","date":"2026-10-25","epss":0.00309,"percentile":0.235}],"risk":0.17767499999999997,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/536607604"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113139","description":"Memory corruption in Autofill in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113144","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113144","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113144","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113144","date":"2026-10-25","epss":0.00309,"percentile":0.235}],"risk":0.17767499999999997,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/544498565"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113144","description":"Memory corruption in Speech in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113035","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113035","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113035","cwe":"CWE-125","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113035","date":"2026-10-25","epss":0.00309,"percentile":0.23499}],"risk":0.17767499999999997,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/498786597"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113035","description":"Out of bounds read in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113304","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113304","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113304","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113304","date":"2026-10-25","epss":0.00309,"percentile":0.23499}],"risk":0.17767499999999997,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/559720179"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113304","description":"Memory corruption in GPU in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113051","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113051","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113051","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113051","date":"2026-10-25","epss":0.00302,"percentile":0.22745}],"risk":0.17365,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/504107363"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113051","description":"Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113070","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113070","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113070","cwe":"CWE-125","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113070","date":"2026-10-25","epss":0.00302,"percentile":0.22745}],"risk":0.17365,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/499112419"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113070","description":"Out of bounds read in GetUserMedia in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113050","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113050","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113050","cwe":"CWE-125","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113050","date":"2026-10-25","epss":0.00302,"percentile":0.22744}],"risk":0.17365,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/562655586"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113050","description":"Out of bounds read in HID in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113129","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113129","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113129","cwe":"CWE-284","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113129","date":"2026-10-25","epss":0.00291,"percentile":0.21451}],"risk":0.16732499999999997,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/501738293"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113129","description":"Improper access control in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"8dcde03d64e74ce9","cpes":["cpe:2.3:a:chromium:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:155.0.8059.84-r0:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@155.0.8059.84-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"155.0.8059.84-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-113010","versionConstraint":"< 156.0.8078.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:155.0.8059.84:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"155.0.8059.84-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-113010","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113010","cwe":"CWE-125","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-113010","date":"2026-10-25","epss":0.00287,"percentile":0.21049}],"risk":0.165025,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html","https://issues.chromium.org/issues/518240362"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113010","description":"Out of bounds read in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"d690b425b757db47","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70632","versionConstraint":">= 4.4, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70632","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70632","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70632","date":"2026-10-25","epss":0.002,"percentile":0.09796}],"risk":0.1565,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70632","description":"FFmpeg versions from 4.4 up to, but not including, 9.0 contain an out-of-bounds heap write vulnerability in the native GoPro CineForm HD (CFHD) decoder that allows remote attackers to corrupt heap memory by supplying a crafted AVI file during stream probing. The cfhd_decode() function fails to enforce the non-Bayer logical output-width invariant in the transform-type-2 reconstruction path, causing horiz_filter_clip() to write oversized 16-bit sample rows far beyond the allocated output frame buffer, which can be escalated to arbitrary code execution via overwrite of a live cleanup callback pointer."},"relatedVulnerabilities":[]},{"artifact":{"id":"243e974ceb6a5245","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70632","versionConstraint":">= 4.4, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70632","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70632","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70632","date":"2026-10-25","epss":0.002,"percentile":0.09796}],"risk":0.1565,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70632","description":"FFmpeg versions from 4.4 up to, but not including, 9.0 contain an out-of-bounds heap write vulnerability in the native GoPro CineForm HD (CFHD) decoder that allows remote attackers to corrupt heap memory by supplying a crafted AVI file during stream probing. The cfhd_decode() function fails to enforce the non-Bayer logical output-width invariant in the transform-type-2 reconstruction path, causing horiz_filter_clip() to write oversized 16-bit sample rows far beyond the allocated output frame buffer, which can be escalated to arbitrary code execution via overwrite of a live cleanup callback pointer."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6896ca1d5ee5394","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70632","versionConstraint":">= 4.4, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70632","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70632","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70632","date":"2026-10-25","epss":0.002,"percentile":0.09796}],"risk":0.1565,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70632","description":"FFmpeg versions from 4.4 up to, but not including, 9.0 contain an out-of-bounds heap write vulnerability in the native GoPro CineForm HD (CFHD) decoder that allows remote attackers to corrupt heap memory by supplying a crafted AVI file during stream probing. The cfhd_decode() function fails to enforce the non-Bayer logical output-width invariant in the transform-type-2 reconstruction path, causing horiz_filter_clip() to write oversized 16-bit sample rows far beyond the allocated output frame buffer, which can be escalated to arbitrary code execution via overwrite of a live cleanup callback pointer."},"relatedVulnerabilities":[]},{"artifact":{"id":"1c27d303595909ee","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70632","versionConstraint":">= 4.4, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70632","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70632","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70632","date":"2026-10-25","epss":0.002,"percentile":0.09796}],"risk":0.1565,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70632","description":"FFmpeg versions from 4.4 up to, but not including, 9.0 contain an out-of-bounds heap write vulnerability in the native GoPro CineForm HD (CFHD) decoder that allows remote attackers to corrupt heap memory by supplying a crafted AVI file during stream probing. The cfhd_decode() function fails to enforce the non-Bayer logical output-width invariant in the transform-type-2 reconstruction path, causing horiz_filter_clip() to write oversized 16-bit sample rows far beyond the allocated output frame buffer, which can be escalated to arbitrary code execution via overwrite of a live cleanup callback pointer."},"relatedVulnerabilities":[]},{"artifact":{"id":"d690b425b757db47","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107697","versionConstraint":"< 8.1.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107697","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107697","cwe":"CWE-693","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107697","date":"2026-10-25","epss":0.00319,"percentile":0.24689}],"risk":0.15631,"urls":["https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n8.1.2/libavformat/hls.c#L834","https://github.com/FFmpeg/FFmpeg/commit/01044d04536e","https://github.com/FFmpeg/FFmpeg/commit/191715f0232c","https://github.com/FFmpeg/FFmpeg/commit/23602df9cd1b485c45ba6f533d3b85569de3f323","https://www.vulncheck.com/advisories/ffmpeg-before-8.1.3-hls-demuxer-security-check-bypass-via-parse-playlist"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107697","description":"FFmpeg before 8.1.3 contains a protection mechanism failure in the HLS demuxer that allows attackers to bypass protocol and allowed_extensions restrictions when opening child playlists. Attackers can supply a crafted master playlist whose child playlists use disallowed protocols or non-multimedia local files, making parse_playlist() open resources the HLS security policy should block."},"relatedVulnerabilities":[]},{"artifact":{"id":"243e974ceb6a5245","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107697","versionConstraint":"< 8.1.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107697","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107697","cwe":"CWE-693","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107697","date":"2026-10-25","epss":0.00319,"percentile":0.24689}],"risk":0.15631,"urls":["https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n8.1.2/libavformat/hls.c#L834","https://github.com/FFmpeg/FFmpeg/commit/01044d04536e","https://github.com/FFmpeg/FFmpeg/commit/191715f0232c","https://github.com/FFmpeg/FFmpeg/commit/23602df9cd1b485c45ba6f533d3b85569de3f323","https://www.vulncheck.com/advisories/ffmpeg-before-8.1.3-hls-demuxer-security-check-bypass-via-parse-playlist"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107697","description":"FFmpeg before 8.1.3 contains a protection mechanism failure in the HLS demuxer that allows attackers to bypass protocol and allowed_extensions restrictions when opening child playlists. Attackers can supply a crafted master playlist whose child playlists use disallowed protocols or non-multimedia local files, making parse_playlist() open resources the HLS security policy should block."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6896ca1d5ee5394","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107697","versionConstraint":"< 8.1.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107697","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107697","cwe":"CWE-693","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107697","date":"2026-10-25","epss":0.00319,"percentile":0.24689}],"risk":0.15631,"urls":["https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n8.1.2/libavformat/hls.c#L834","https://github.com/FFmpeg/FFmpeg/commit/01044d04536e","https://github.com/FFmpeg/FFmpeg/commit/191715f0232c","https://github.com/FFmpeg/FFmpeg/commit/23602df9cd1b485c45ba6f533d3b85569de3f323","https://www.vulncheck.com/advisories/ffmpeg-before-8.1.3-hls-demuxer-security-check-bypass-via-parse-playlist"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107697","description":"FFmpeg before 8.1.3 contains a protection mechanism failure in the HLS demuxer that allows attackers to bypass protocol and allowed_extensions restrictions when opening child playlists. Attackers can supply a crafted master playlist whose child playlists use disallowed protocols or non-multimedia local files, making parse_playlist() open resources the HLS security policy should block."},"relatedVulnerabilities":[]},{"artifact":{"id":"1c27d303595909ee","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107697","versionConstraint":"< 8.1.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107697","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107697","cwe":"CWE-693","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107697","date":"2026-10-25","epss":0.00319,"percentile":0.24689}],"risk":0.15631,"urls":["https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n8.1.2/libavformat/hls.c#L834","https://github.com/FFmpeg/FFmpeg/commit/01044d04536e","https://github.com/FFmpeg/FFmpeg/commit/191715f0232c","https://github.com/FFmpeg/FFmpeg/commit/23602df9cd1b485c45ba6f533d3b85569de3f323","https://www.vulncheck.com/advisories/ffmpeg-before-8.1.3-hls-demuxer-security-check-bypass-via-parse-playlist"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107697","description":"FFmpeg before 8.1.3 contains a protection mechanism failure in the HLS demuxer that allows attackers to bypass protocol and allowed_extensions restrictions when opening child playlists. Attackers can supply a crafted master playlist whose child playlists use disallowed protocols or non-multimedia local files, making parse_playlist() open resources the HLS security policy should block."},"relatedVulnerabilities":[]},{"artifact":{"id":"d690b425b757db47","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-65706","versionConstraint":">= 3.0, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-65706","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-65706","cwe":"CWE-131","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-65706","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-65706","date":"2026-10-25","epss":0.00187,"percentile":0.08247}],"risk":0.1463275,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/a7e38b617b32f996beaa371bbf04b39907d7a527","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23779","https://www.vulncheck.com/advisories/ffmpeg-vf-swaprect-out-of-bounds-write-via-nv12-frame-processing"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-65706","description":"FFmpeg versions 3.0 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_swaprect video filter that allows attackers to corrupt heap memory by supplying a crafted NV12 video frame with odd width dimensions. The filter_frame() function reuses a temporary row buffer sized for plane 0's single-byte pixel step across all planes, causing an 18-byte memcpy into a 17-byte heap allocation when processing the two-byte-per-sample interleaved chroma plane of a 17x16 NV12 frame, resulting in heap corruption and process crash with potential for code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"243e974ceb6a5245","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-65706","versionConstraint":">= 3.0, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-65706","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-65706","cwe":"CWE-131","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-65706","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-65706","date":"2026-10-25","epss":0.00187,"percentile":0.08247}],"risk":0.1463275,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/a7e38b617b32f996beaa371bbf04b39907d7a527","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23779","https://www.vulncheck.com/advisories/ffmpeg-vf-swaprect-out-of-bounds-write-via-nv12-frame-processing"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-65706","description":"FFmpeg versions 3.0 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_swaprect video filter that allows attackers to corrupt heap memory by supplying a crafted NV12 video frame with odd width dimensions. The filter_frame() function reuses a temporary row buffer sized for plane 0's single-byte pixel step across all planes, causing an 18-byte memcpy into a 17-byte heap allocation when processing the two-byte-per-sample interleaved chroma plane of a 17x16 NV12 frame, resulting in heap corruption and process crash with potential for code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6896ca1d5ee5394","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-65706","versionConstraint":">= 3.0, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-65706","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-65706","cwe":"CWE-131","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-65706","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-65706","date":"2026-10-25","epss":0.00187,"percentile":0.08247}],"risk":0.1463275,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/a7e38b617b32f996beaa371bbf04b39907d7a527","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23779","https://www.vulncheck.com/advisories/ffmpeg-vf-swaprect-out-of-bounds-write-via-nv12-frame-processing"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-65706","description":"FFmpeg versions 3.0 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_swaprect video filter that allows attackers to corrupt heap memory by supplying a crafted NV12 video frame with odd width dimensions. The filter_frame() function reuses a temporary row buffer sized for plane 0's single-byte pixel step across all planes, causing an 18-byte memcpy into a 17-byte heap allocation when processing the two-byte-per-sample interleaved chroma plane of a 17x16 NV12 frame, resulting in heap corruption and process crash with potential for code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"1c27d303595909ee","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-65706","versionConstraint":">= 3.0, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-65706","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-65706","cwe":"CWE-131","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-65706","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-65706","date":"2026-10-25","epss":0.00187,"percentile":0.08247}],"risk":0.1463275,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/a7e38b617b32f996beaa371bbf04b39907d7a527","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23779","https://www.vulncheck.com/advisories/ffmpeg-vf-swaprect-out-of-bounds-write-via-nv12-frame-processing"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-65706","description":"FFmpeg versions 3.0 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_swaprect video filter that allows attackers to corrupt heap memory by supplying a crafted NV12 video frame with odd width dimensions. The filter_frame() function reuses a temporary row buffer sized for plane 0's single-byte pixel step across all planes, causing an 18-byte memcpy into a 17-byte heap allocation when processing the two-byte-per-sample interleaved chroma plane of a 17x16 NV12 frame, resulting in heap corruption and process crash with potential for code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"d690b425b757db47","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66038","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66038","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66038","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66038","date":"2026-10-25","epss":0.00242,"percentile":0.15216}],"risk":0.14156999999999997,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/e7cbfd1c507b57a806a5825b87d609963e862c8c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23626","https://www.vulncheck.com/advisories/ffmpeg-lcl-zlib-video-decoder-information-disclosure-via-lcldec-c"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66038","description":"FFmpeg through 8.1.2, fixed in commit 8670835, contains an information disclosure vulnerability in the LCL/ZLIB video decoder that allows attackers to expose uninitialized heap memory by supplying a valid zlib stream that inflates to fewer bytes than the expected frame size. The zlib_decomp() function in lcldec.c treats short decompression as non-fatal and continues to the RGB24 conversion path, which copies a full frame's worth of rows from the allocation buffer using original frame dimensions, causing uninitialized heap contents including pointer-derived allocator bytes to be copied into the attacker-observable AVFrame output and potentially defeating ASLR in long-lived media processing services."},"relatedVulnerabilities":[]},{"artifact":{"id":"243e974ceb6a5245","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66038","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66038","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66038","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66038","date":"2026-10-25","epss":0.00242,"percentile":0.15216}],"risk":0.14156999999999997,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/e7cbfd1c507b57a806a5825b87d609963e862c8c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23626","https://www.vulncheck.com/advisories/ffmpeg-lcl-zlib-video-decoder-information-disclosure-via-lcldec-c"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66038","description":"FFmpeg through 8.1.2, fixed in commit 8670835, contains an information disclosure vulnerability in the LCL/ZLIB video decoder that allows attackers to expose uninitialized heap memory by supplying a valid zlib stream that inflates to fewer bytes than the expected frame size. The zlib_decomp() function in lcldec.c treats short decompression as non-fatal and continues to the RGB24 conversion path, which copies a full frame's worth of rows from the allocation buffer using original frame dimensions, causing uninitialized heap contents including pointer-derived allocator bytes to be copied into the attacker-observable AVFrame output and potentially defeating ASLR in long-lived media processing services."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6896ca1d5ee5394","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66038","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66038","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66038","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66038","date":"2026-10-25","epss":0.00242,"percentile":0.15216}],"risk":0.14156999999999997,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/e7cbfd1c507b57a806a5825b87d609963e862c8c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23626","https://www.vulncheck.com/advisories/ffmpeg-lcl-zlib-video-decoder-information-disclosure-via-lcldec-c"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66038","description":"FFmpeg through 8.1.2, fixed in commit 8670835, contains an information disclosure vulnerability in the LCL/ZLIB video decoder that allows attackers to expose uninitialized heap memory by supplying a valid zlib stream that inflates to fewer bytes than the expected frame size. The zlib_decomp() function in lcldec.c treats short decompression as non-fatal and continues to the RGB24 conversion path, which copies a full frame's worth of rows from the allocation buffer using original frame dimensions, causing uninitialized heap contents including pointer-derived allocator bytes to be copied into the attacker-observable AVFrame output and potentially defeating ASLR in long-lived media processing services."},"relatedVulnerabilities":[]},{"artifact":{"id":"1c27d303595909ee","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66038","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66038","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66038","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66038","date":"2026-10-25","epss":0.00242,"percentile":0.15216}],"risk":0.14156999999999997,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/e7cbfd1c507b57a806a5825b87d609963e862c8c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23626","https://www.vulncheck.com/advisories/ffmpeg-lcl-zlib-video-decoder-information-disclosure-via-lcldec-c"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66038","description":"FFmpeg through 8.1.2, fixed in commit 8670835, contains an information disclosure vulnerability in the LCL/ZLIB video decoder that allows attackers to expose uninitialized heap memory by supplying a valid zlib stream that inflates to fewer bytes than the expected frame size. The zlib_decomp() function in lcldec.c treats short decompression as non-fatal and continues to the RGB24 conversion path, which copies a full frame's worth of rows from the allocation buffer using original frame dimensions, causing uninitialized heap contents including pointer-derived allocator bytes to be copied into the attacker-observable AVFrame output and potentially defeating ASLR in long-lived media processing services."},"relatedVulnerabilities":[]},{"artifact":{"id":"d690b425b757db47","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-65705","versionConstraint":">= 3.4, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-65705","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-65705","cwe":"CWE-131","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-65705","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-65705","date":"2026-10-25","epss":0.00187,"percentile":0.08247}],"risk":0.1407175,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/f186c50cf53aec20e9a29059cb22ca3f2d59201c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23780","https://www.vulncheck.com/advisories/ffmpeg-vf-floodfill-out-of-bounds-write-via-filter-frame"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-65705","description":"FFmpeg versions 3.4 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_floodfill video filter that allows attackers to corrupt heap memory by supplying a dynamically sized video stream with filtergraph reinitialization disabled via -reinit_filter 0. When config_input() allocates the points traversal stack based on initial frame dimensions and a subsequent larger frame is processed, filter_frame() performs flood-fill neighbor pushes beyond the original allocation boundary, resulting in heap corruption and process crash with potential for code execution depending on heap layout and process hardening."},"relatedVulnerabilities":[]},{"artifact":{"id":"243e974ceb6a5245","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-65705","versionConstraint":">= 3.4, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-65705","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-65705","cwe":"CWE-131","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-65705","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-65705","date":"2026-10-25","epss":0.00187,"percentile":0.08247}],"risk":0.1407175,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/f186c50cf53aec20e9a29059cb22ca3f2d59201c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23780","https://www.vulncheck.com/advisories/ffmpeg-vf-floodfill-out-of-bounds-write-via-filter-frame"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-65705","description":"FFmpeg versions 3.4 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_floodfill video filter that allows attackers to corrupt heap memory by supplying a dynamically sized video stream with filtergraph reinitialization disabled via -reinit_filter 0. When config_input() allocates the points traversal stack based on initial frame dimensions and a subsequent larger frame is processed, filter_frame() performs flood-fill neighbor pushes beyond the original allocation boundary, resulting in heap corruption and process crash with potential for code execution depending on heap layout and process hardening."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6896ca1d5ee5394","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-65705","versionConstraint":">= 3.4, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-65705","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-65705","cwe":"CWE-131","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-65705","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-65705","date":"2026-10-25","epss":0.00187,"percentile":0.08247}],"risk":0.1407175,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/f186c50cf53aec20e9a29059cb22ca3f2d59201c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23780","https://www.vulncheck.com/advisories/ffmpeg-vf-floodfill-out-of-bounds-write-via-filter-frame"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-65705","description":"FFmpeg versions 3.4 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_floodfill video filter that allows attackers to corrupt heap memory by supplying a dynamically sized video stream with filtergraph reinitialization disabled via -reinit_filter 0. When config_input() allocates the points traversal stack based on initial frame dimensions and a subsequent larger frame is processed, filter_frame() performs flood-fill neighbor pushes beyond the original allocation boundary, resulting in heap corruption and process crash with potential for code execution depending on heap layout and process hardening."},"relatedVulnerabilities":[]},{"artifact":{"id":"1c27d303595909ee","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-65705","versionConstraint":">= 3.4, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-65705","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-65705","cwe":"CWE-131","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-65705","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-65705","date":"2026-10-25","epss":0.00187,"percentile":0.08247}],"risk":0.1407175,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/f186c50cf53aec20e9a29059cb22ca3f2d59201c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23780","https://www.vulncheck.com/advisories/ffmpeg-vf-floodfill-out-of-bounds-write-via-filter-frame"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-65705","description":"FFmpeg versions 3.4 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_floodfill video filter that allows attackers to corrupt heap memory by supplying a dynamically sized video stream with filtergraph reinitialization disabled via -reinit_filter 0. When config_input() allocates the points traversal stack based on initial frame dimensions and a subsequent larger frame is processed, filter_frame() performs flood-fill neighbor pushes beyond the original allocation boundary, resulting in heap corruption and process crash with potential for code execution depending on heap layout and process hardening."},"relatedVulnerabilities":[]},{"artifact":{"id":"d690b425b757db47","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-65704","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-65704","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-65704","cwe":"CWE-191","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-65704","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-65704","date":"2026-10-25","epss":0.00178,"percentile":0.07361}],"risk":0.13394499999999998,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/de771bd52774a52d45b0e2c82e56995a1ef40df7","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23767","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-via-ty-demuxer-and-shorten-decoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-65704","description":"FFmpeg through 8.1.2 contains an out-of-bounds write vulnerability that allows attackers to cause heap corruption by supplying a crafted ffconcat file processed with the -safe 0 flag. The TY demuxer's demux_audio() function decrements packet size without bounds checking, producing a negative size value that is passed to memcpy() in shorten_decode_frame(), where conversion to size_t wraps the value to near SIZE_MAX and triggers reads beyond the source allocation and writes far beyond the Shorten decoder's bitstream buffer."},"relatedVulnerabilities":[]},{"artifact":{"id":"243e974ceb6a5245","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-65704","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-65704","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-65704","cwe":"CWE-191","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-65704","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-65704","date":"2026-10-25","epss":0.00178,"percentile":0.07361}],"risk":0.13394499999999998,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/de771bd52774a52d45b0e2c82e56995a1ef40df7","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23767","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-via-ty-demuxer-and-shorten-decoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-65704","description":"FFmpeg through 8.1.2 contains an out-of-bounds write vulnerability that allows attackers to cause heap corruption by supplying a crafted ffconcat file processed with the -safe 0 flag. The TY demuxer's demux_audio() function decrements packet size without bounds checking, producing a negative size value that is passed to memcpy() in shorten_decode_frame(), where conversion to size_t wraps the value to near SIZE_MAX and triggers reads beyond the source allocation and writes far beyond the Shorten decoder's bitstream buffer."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6896ca1d5ee5394","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-65704","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-65704","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-65704","cwe":"CWE-191","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-65704","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-65704","date":"2026-10-25","epss":0.00178,"percentile":0.07361}],"risk":0.13394499999999998,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/de771bd52774a52d45b0e2c82e56995a1ef40df7","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23767","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-via-ty-demuxer-and-shorten-decoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-65704","description":"FFmpeg through 8.1.2 contains an out-of-bounds write vulnerability that allows attackers to cause heap corruption by supplying a crafted ffconcat file processed with the -safe 0 flag. The TY demuxer's demux_audio() function decrements packet size without bounds checking, producing a negative size value that is passed to memcpy() in shorten_decode_frame(), where conversion to size_t wraps the value to near SIZE_MAX and triggers reads beyond the source allocation and writes far beyond the Shorten decoder's bitstream buffer."},"relatedVulnerabilities":[]},{"artifact":{"id":"1c27d303595909ee","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-65704","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-65704","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-65704","cwe":"CWE-191","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-65704","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-65704","date":"2026-10-25","epss":0.00178,"percentile":0.07361}],"risk":0.13394499999999998,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/de771bd52774a52d45b0e2c82e56995a1ef40df7","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23767","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-via-ty-demuxer-and-shorten-decoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-65704","description":"FFmpeg through 8.1.2 contains an out-of-bounds write vulnerability that allows attackers to cause heap corruption by supplying a crafted ffconcat file processed with the -safe 0 flag. The TY demuxer's demux_audio() function decrements packet size without bounds checking, producing a negative size value that is passed to memcpy() in shorten_decode_frame(), where conversion to size_t wraps the value to near SIZE_MAX and triggers reads beyond the source allocation and writes far beyond the Shorten decoder's bitstream buffer."},"relatedVulnerabilities":[]},{"artifact":{"id":"d690b425b757db47","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70628","versionConstraint":">= 0.5, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70628","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70628","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-70628","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70628","date":"2026-10-25","epss":0.00145,"percentile":0.03729}],"risk":0.11346249999999998,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897","https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70628","description":"FFmpeg versions from 0.5 up to, but not including, 9.0 contain a signed integer overflow vulnerability in the DVB subtitle parser in libavcodec/dvbsub_parser.c that allows attackers to trigger a heap buffer overflow by supplying a crafted WTV file. The overflow causes the bounds-check guard expression to wrap to INT_MIN, bypassing the PARSE_BUF_SIZE comparison and invoking memcpy() with attacker-controlled data into a heap buffer, resulting in an out-of-bounds heap write and potential memory corruption or code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"243e974ceb6a5245","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70628","versionConstraint":">= 0.5, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70628","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70628","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-70628","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70628","date":"2026-10-25","epss":0.00145,"percentile":0.03729}],"risk":0.11346249999999998,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897","https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70628","description":"FFmpeg versions from 0.5 up to, but not including, 9.0 contain a signed integer overflow vulnerability in the DVB subtitle parser in libavcodec/dvbsub_parser.c that allows attackers to trigger a heap buffer overflow by supplying a crafted WTV file. The overflow causes the bounds-check guard expression to wrap to INT_MIN, bypassing the PARSE_BUF_SIZE comparison and invoking memcpy() with attacker-controlled data into a heap buffer, resulting in an out-of-bounds heap write and potential memory corruption or code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6896ca1d5ee5394","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70628","versionConstraint":">= 0.5, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70628","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70628","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-70628","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70628","date":"2026-10-25","epss":0.00145,"percentile":0.03729}],"risk":0.11346249999999998,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897","https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70628","description":"FFmpeg versions from 0.5 up to, but not including, 9.0 contain a signed integer overflow vulnerability in the DVB subtitle parser in libavcodec/dvbsub_parser.c that allows attackers to trigger a heap buffer overflow by supplying a crafted WTV file. The overflow causes the bounds-check guard expression to wrap to INT_MIN, bypassing the PARSE_BUF_SIZE comparison and invoking memcpy() with attacker-controlled data into a heap buffer, resulting in an out-of-bounds heap write and potential memory corruption or code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"1c27d303595909ee","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70628","versionConstraint":">= 0.5, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70628","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70628","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-70628","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70628","date":"2026-10-25","epss":0.00145,"percentile":0.03729}],"risk":0.11346249999999998,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897","https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70628","description":"FFmpeg versions from 0.5 up to, but not including, 9.0 contain a signed integer overflow vulnerability in the DVB subtitle parser in libavcodec/dvbsub_parser.c that allows attackers to trigger a heap buffer overflow by supplying a crafted WTV file. The overflow causes the bounds-check guard expression to wrap to INT_MIN, bypassing the PARSE_BUF_SIZE comparison and invoking memcpy() with attacker-controlled data into a heap buffer, resulting in an out-of-bounds heap write and potential memory corruption or code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"d690b425b757db47","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107675","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107675","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N","metrics":{"baseScore":5.9,"impactScore":4.3,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107675","cwe":"CWE-322","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107675","date":"2026-10-25","epss":0.00186,"percentile":0.08075}],"risk":0.10183500000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/2b822b7fb6ed195546bc9fd9bdb794e98222bdce","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24384","https://ffmpeg.org/","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/libssh.c#L60-L110","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-missing-ssh-host-key-verification-in-sftp-protocol"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107675","description":"FFmpeg through 9.0.2 contains a missing host key verification vulnerability in the libssh-based sftp protocol handler that allows network attackers to impersonate SFTP servers. Attackers performing man-in-the-middle, DNS, or ARP spoofing can capture passwords supplied in sftp URLs, serve forged media, or receive uploaded output."},"relatedVulnerabilities":[]},{"artifact":{"id":"243e974ceb6a5245","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107675","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107675","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N","metrics":{"baseScore":5.9,"impactScore":4.3,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107675","cwe":"CWE-322","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107675","date":"2026-10-25","epss":0.00186,"percentile":0.08075}],"risk":0.10183500000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/2b822b7fb6ed195546bc9fd9bdb794e98222bdce","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24384","https://ffmpeg.org/","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/libssh.c#L60-L110","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-missing-ssh-host-key-verification-in-sftp-protocol"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107675","description":"FFmpeg through 9.0.2 contains a missing host key verification vulnerability in the libssh-based sftp protocol handler that allows network attackers to impersonate SFTP servers. Attackers performing man-in-the-middle, DNS, or ARP spoofing can capture passwords supplied in sftp URLs, serve forged media, or receive uploaded output."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6896ca1d5ee5394","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107675","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107675","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N","metrics":{"baseScore":5.9,"impactScore":4.3,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107675","cwe":"CWE-322","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107675","date":"2026-10-25","epss":0.00186,"percentile":0.08075}],"risk":0.10183500000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/2b822b7fb6ed195546bc9fd9bdb794e98222bdce","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24384","https://ffmpeg.org/","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/libssh.c#L60-L110","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-missing-ssh-host-key-verification-in-sftp-protocol"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107675","description":"FFmpeg through 9.0.2 contains a missing host key verification vulnerability in the libssh-based sftp protocol handler that allows network attackers to impersonate SFTP servers. Attackers performing man-in-the-middle, DNS, or ARP spoofing can capture passwords supplied in sftp URLs, serve forged media, or receive uploaded output."},"relatedVulnerabilities":[]},{"artifact":{"id":"1c27d303595909ee","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107675","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107675","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N","metrics":{"baseScore":5.9,"impactScore":4.3,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107675","cwe":"CWE-322","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107675","date":"2026-10-25","epss":0.00186,"percentile":0.08075}],"risk":0.10183500000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/2b822b7fb6ed195546bc9fd9bdb794e98222bdce","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24384","https://ffmpeg.org/","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/libssh.c#L60-L110","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-missing-ssh-host-key-verification-in-sftp-protocol"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107675","description":"FFmpeg through 9.0.2 contains a missing host key verification vulnerability in the libssh-based sftp protocol handler that allows network attackers to impersonate SFTP servers. Attackers performing man-in-the-middle, DNS, or ARP spoofing can capture passwords supplied in sftp URLs, serve forged media, or receive uploaded output."},"relatedVulnerabilities":[]},{"artifact":{"id":"d690b425b757db47","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70631","versionConstraint":">= 0.5, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70631","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70631","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70631","date":"2026-10-25","epss":0.00178,"percentile":0.07298}],"risk":0.09923499999999999,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/2f234ea34c81288e3840fca632dd16481d8de39f","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/3c287af3affe1286350faa69c02bcc5d49de18bb","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/a991b1fecbd8c9e6f4fc31c191bd12e4be27dbf7","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23899","https://www.vulncheck.com/advisories/ffmpeg-uninitialized-heap-memory-read-in-tiff-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70631","description":"FFmpeg versions from 0.5 up to, but not including, 9.0 contain an uninitialized heap memory disclosure vulnerability in the native TIFF decoder in libavcodec/tiff.c. An attacker who can cause FFmpeg to decode a crafted TIFF file can supply a valid Deflate-compressed strip that terminates successfully after producing fewer bytes than the declared strip requires. The tiff_unpack_zlib() function allocates a heap buffer sized for the full declared strip but copies all declared rows via memcpy() regardless of how many bytes zlib actually decompressed, causing unwritten bytes that can contain stale data from prior heap allocations to be incorporated into decoded image output and potentially exposing sensitive data in persistent services."},"relatedVulnerabilities":[]},{"artifact":{"id":"243e974ceb6a5245","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70631","versionConstraint":">= 0.5, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70631","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70631","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70631","date":"2026-10-25","epss":0.00178,"percentile":0.07298}],"risk":0.09923499999999999,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/2f234ea34c81288e3840fca632dd16481d8de39f","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/3c287af3affe1286350faa69c02bcc5d49de18bb","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/a991b1fecbd8c9e6f4fc31c191bd12e4be27dbf7","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23899","https://www.vulncheck.com/advisories/ffmpeg-uninitialized-heap-memory-read-in-tiff-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70631","description":"FFmpeg versions from 0.5 up to, but not including, 9.0 contain an uninitialized heap memory disclosure vulnerability in the native TIFF decoder in libavcodec/tiff.c. An attacker who can cause FFmpeg to decode a crafted TIFF file can supply a valid Deflate-compressed strip that terminates successfully after producing fewer bytes than the declared strip requires. The tiff_unpack_zlib() function allocates a heap buffer sized for the full declared strip but copies all declared rows via memcpy() regardless of how many bytes zlib actually decompressed, causing unwritten bytes that can contain stale data from prior heap allocations to be incorporated into decoded image output and potentially exposing sensitive data in persistent services."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6896ca1d5ee5394","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70631","versionConstraint":">= 0.5, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70631","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70631","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70631","date":"2026-10-25","epss":0.00178,"percentile":0.07298}],"risk":0.09923499999999999,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/2f234ea34c81288e3840fca632dd16481d8de39f","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/3c287af3affe1286350faa69c02bcc5d49de18bb","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/a991b1fecbd8c9e6f4fc31c191bd12e4be27dbf7","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23899","https://www.vulncheck.com/advisories/ffmpeg-uninitialized-heap-memory-read-in-tiff-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70631","description":"FFmpeg versions from 0.5 up to, but not including, 9.0 contain an uninitialized heap memory disclosure vulnerability in the native TIFF decoder in libavcodec/tiff.c. An attacker who can cause FFmpeg to decode a crafted TIFF file can supply a valid Deflate-compressed strip that terminates successfully after producing fewer bytes than the declared strip requires. The tiff_unpack_zlib() function allocates a heap buffer sized for the full declared strip but copies all declared rows via memcpy() regardless of how many bytes zlib actually decompressed, causing unwritten bytes that can contain stale data from prior heap allocations to be incorporated into decoded image output and potentially exposing sensitive data in persistent services."},"relatedVulnerabilities":[]},{"artifact":{"id":"1c27d303595909ee","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70631","versionConstraint":">= 0.5, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70631","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70631","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70631","date":"2026-10-25","epss":0.00178,"percentile":0.07298}],"risk":0.09923499999999999,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/2f234ea34c81288e3840fca632dd16481d8de39f","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/3c287af3affe1286350faa69c02bcc5d49de18bb","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/a991b1fecbd8c9e6f4fc31c191bd12e4be27dbf7","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23899","https://www.vulncheck.com/advisories/ffmpeg-uninitialized-heap-memory-read-in-tiff-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70631","description":"FFmpeg versions from 0.5 up to, but not including, 9.0 contain an uninitialized heap memory disclosure vulnerability in the native TIFF decoder in libavcodec/tiff.c. An attacker who can cause FFmpeg to decode a crafted TIFF file can supply a valid Deflate-compressed strip that terminates successfully after producing fewer bytes than the declared strip requires. The tiff_unpack_zlib() function allocates a heap buffer sized for the full declared strip but copies all declared rows via memcpy() regardless of how many bytes zlib actually decompressed, causing unwritten bytes that can contain stale data from prior heap allocations to be incorporated into decoded image output and potentially exposing sensitive data in persistent services."},"relatedVulnerabilities":[]},{"artifact":{"id":"d690b425b757db47","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-52296","versionConstraint":"< 9.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-52296","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":5.2,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":2.9,"impactScore":1.5,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-52296","cwe":"CWE-125","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-52296","date":"2026-10-25","epss":0.00158,"percentile":0.04892}],"risk":0.09875,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22988","https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/23227a444de4a8f7696f46660cdd044b460f7e47","https://github.com/Kenan-Kamel/VulnerabilitiesReference/tree/main/FFmpeg/ExtradataPadding"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-52296","description":"FFmpeg before 9.0 has an out-of-bounds read because of missing required padding in WMA extradata allocation paths in libavcodec/wmaenc.c."},"relatedVulnerabilities":[]},{"artifact":{"id":"243e974ceb6a5245","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-52296","versionConstraint":"< 9.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-52296","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":5.2,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":2.9,"impactScore":1.5,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-52296","cwe":"CWE-125","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-52296","date":"2026-10-25","epss":0.00158,"percentile":0.04892}],"risk":0.09875,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22988","https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/23227a444de4a8f7696f46660cdd044b460f7e47","https://github.com/Kenan-Kamel/VulnerabilitiesReference/tree/main/FFmpeg/ExtradataPadding"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-52296","description":"FFmpeg before 9.0 has an out-of-bounds read because of missing required padding in WMA extradata allocation paths in libavcodec/wmaenc.c."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6896ca1d5ee5394","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-52296","versionConstraint":"< 9.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-52296","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":5.2,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":2.9,"impactScore":1.5,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-52296","cwe":"CWE-125","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-52296","date":"2026-10-25","epss":0.00158,"percentile":0.04892}],"risk":0.09875,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22988","https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/23227a444de4a8f7696f46660cdd044b460f7e47","https://github.com/Kenan-Kamel/VulnerabilitiesReference/tree/main/FFmpeg/ExtradataPadding"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-52296","description":"FFmpeg before 9.0 has an out-of-bounds read because of missing required padding in WMA extradata allocation paths in libavcodec/wmaenc.c."},"relatedVulnerabilities":[]},{"artifact":{"id":"1c27d303595909ee","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-52296","versionConstraint":"< 9.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-52296","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":5.2,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":2.9,"impactScore":1.5,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-52296","cwe":"CWE-125","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-52296","date":"2026-10-25","epss":0.00158,"percentile":0.04892}],"risk":0.09875,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22988","https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/23227a444de4a8f7696f46660cdd044b460f7e47","https://github.com/Kenan-Kamel/VulnerabilitiesReference/tree/main/FFmpeg/ExtradataPadding"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-52296","description":"FFmpeg before 9.0 has an out-of-bounds read because of missing required padding in WMA extradata allocation paths in libavcodec/wmaenc.c."},"relatedVulnerabilities":[]},{"artifact":{"id":"d690b425b757db47","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70629","versionConstraint":">= 3.0, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70629","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70629","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70629","date":"2026-10-25","epss":0.00175,"percentile":0.06929}],"risk":0.09756250000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/533a6198505edd1379e1cd722852350ae4a85acc","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/a5fe21a1a410a680fe93c33b0dd696b7e1c3aea4","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/cd1f545cf27ba08f6f5b31b1e92665d7874d4fd7","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23895","https://www.vulncheck.com/advisories/ffmpeg-uninitialized-heap-memory-read-in-rscc-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70629","description":"FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read vulnerability in the native RSCC decoder (libavcodec/rscc.c) that allows attackers to disclose heap memory contents by supplying a crafted video file with a compressed tile that decompresses fewer bytes than the declared tile geometry requires. When rscc_decode_frame() calls av_image_copy_plane() without validating the decompressed byte count against the tile dimensions, the unwritten suffix of the persistent intermediate buffer ctx->inflated_buf is copied into the decoded frame, potentially exposing data from prior heap allocations or previous decoded frames in persistent decoding services."},"relatedVulnerabilities":[]},{"artifact":{"id":"d690b425b757db47","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70630","versionConstraint":">= 3.0, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70630","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70630","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70630","date":"2026-10-25","epss":0.00175,"percentile":0.06929}],"risk":0.09756250000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/705890061467ad550ecc1dad5eea07f28ccfb43e","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9a3202a98b2e095b54dd784c3e01a09a676fc3fa","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c22667d0fd7916a33fd3e79685b7246fc48f1a62","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23896","https://www.vulncheck.com/advisories/ffmpeg-uninitialized-heap-memory-read-in-screenpresso-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70630","description":"FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read vulnerability in the native Screenpresso decoder (libavcodec/screenpresso.c) that allows attackers to recover sensitive memory contents by supplying a crafted SPV1 packet with a valid zlib stream that decompresses fewer bytes than the full frame requires. The screenpresso_decode_frame() function fails to validate the produced byte count before calling av_image_copy_plane() to copy the complete frame dimensions from the persistent ctx->inflated_buf buffer, causing unwritten heap memory from prior allocations or prior frames to be copied into decoded output and potentially exposing sensitive data such as userspace addresses from persistent decoding services."},"relatedVulnerabilities":[]},{"artifact":{"id":"243e974ceb6a5245","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70629","versionConstraint":">= 3.0, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70629","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70629","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70629","date":"2026-10-25","epss":0.00175,"percentile":0.06929}],"risk":0.09756250000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/533a6198505edd1379e1cd722852350ae4a85acc","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/a5fe21a1a410a680fe93c33b0dd696b7e1c3aea4","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/cd1f545cf27ba08f6f5b31b1e92665d7874d4fd7","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23895","https://www.vulncheck.com/advisories/ffmpeg-uninitialized-heap-memory-read-in-rscc-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70629","description":"FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read vulnerability in the native RSCC decoder (libavcodec/rscc.c) that allows attackers to disclose heap memory contents by supplying a crafted video file with a compressed tile that decompresses fewer bytes than the declared tile geometry requires. When rscc_decode_frame() calls av_image_copy_plane() without validating the decompressed byte count against the tile dimensions, the unwritten suffix of the persistent intermediate buffer ctx->inflated_buf is copied into the decoded frame, potentially exposing data from prior heap allocations or previous decoded frames in persistent decoding services."},"relatedVulnerabilities":[]},{"artifact":{"id":"243e974ceb6a5245","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70630","versionConstraint":">= 3.0, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70630","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70630","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70630","date":"2026-10-25","epss":0.00175,"percentile":0.06929}],"risk":0.09756250000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/705890061467ad550ecc1dad5eea07f28ccfb43e","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9a3202a98b2e095b54dd784c3e01a09a676fc3fa","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c22667d0fd7916a33fd3e79685b7246fc48f1a62","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23896","https://www.vulncheck.com/advisories/ffmpeg-uninitialized-heap-memory-read-in-screenpresso-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70630","description":"FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read vulnerability in the native Screenpresso decoder (libavcodec/screenpresso.c) that allows attackers to recover sensitive memory contents by supplying a crafted SPV1 packet with a valid zlib stream that decompresses fewer bytes than the full frame requires. The screenpresso_decode_frame() function fails to validate the produced byte count before calling av_image_copy_plane() to copy the complete frame dimensions from the persistent ctx->inflated_buf buffer, causing unwritten heap memory from prior allocations or prior frames to be copied into decoded output and potentially exposing sensitive data such as userspace addresses from persistent decoding services."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6896ca1d5ee5394","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70629","versionConstraint":">= 3.0, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70629","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70629","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70629","date":"2026-10-25","epss":0.00175,"percentile":0.06929}],"risk":0.09756250000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/533a6198505edd1379e1cd722852350ae4a85acc","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/a5fe21a1a410a680fe93c33b0dd696b7e1c3aea4","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/cd1f545cf27ba08f6f5b31b1e92665d7874d4fd7","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23895","https://www.vulncheck.com/advisories/ffmpeg-uninitialized-heap-memory-read-in-rscc-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70629","description":"FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read vulnerability in the native RSCC decoder (libavcodec/rscc.c) that allows attackers to disclose heap memory contents by supplying a crafted video file with a compressed tile that decompresses fewer bytes than the declared tile geometry requires. When rscc_decode_frame() calls av_image_copy_plane() without validating the decompressed byte count against the tile dimensions, the unwritten suffix of the persistent intermediate buffer ctx->inflated_buf is copied into the decoded frame, potentially exposing data from prior heap allocations or previous decoded frames in persistent decoding services."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6896ca1d5ee5394","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70630","versionConstraint":">= 3.0, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70630","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70630","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70630","date":"2026-10-25","epss":0.00175,"percentile":0.06929}],"risk":0.09756250000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/705890061467ad550ecc1dad5eea07f28ccfb43e","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9a3202a98b2e095b54dd784c3e01a09a676fc3fa","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c22667d0fd7916a33fd3e79685b7246fc48f1a62","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23896","https://www.vulncheck.com/advisories/ffmpeg-uninitialized-heap-memory-read-in-screenpresso-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70630","description":"FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read vulnerability in the native Screenpresso decoder (libavcodec/screenpresso.c) that allows attackers to recover sensitive memory contents by supplying a crafted SPV1 packet with a valid zlib stream that decompresses fewer bytes than the full frame requires. The screenpresso_decode_frame() function fails to validate the produced byte count before calling av_image_copy_plane() to copy the complete frame dimensions from the persistent ctx->inflated_buf buffer, causing unwritten heap memory from prior allocations or prior frames to be copied into decoded output and potentially exposing sensitive data such as userspace addresses from persistent decoding services."},"relatedVulnerabilities":[]},{"artifact":{"id":"1c27d303595909ee","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70629","versionConstraint":">= 3.0, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70629","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70629","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70629","date":"2026-10-25","epss":0.00175,"percentile":0.06929}],"risk":0.09756250000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/533a6198505edd1379e1cd722852350ae4a85acc","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/a5fe21a1a410a680fe93c33b0dd696b7e1c3aea4","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/cd1f545cf27ba08f6f5b31b1e92665d7874d4fd7","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23895","https://www.vulncheck.com/advisories/ffmpeg-uninitialized-heap-memory-read-in-rscc-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70629","description":"FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read vulnerability in the native RSCC decoder (libavcodec/rscc.c) that allows attackers to disclose heap memory contents by supplying a crafted video file with a compressed tile that decompresses fewer bytes than the declared tile geometry requires. When rscc_decode_frame() calls av_image_copy_plane() without validating the decompressed byte count against the tile dimensions, the unwritten suffix of the persistent intermediate buffer ctx->inflated_buf is copied into the decoded frame, potentially exposing data from prior heap allocations or previous decoded frames in persistent decoding services."},"relatedVulnerabilities":[]},{"artifact":{"id":"1c27d303595909ee","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70630","versionConstraint":">= 3.0, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70630","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70630","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70630","date":"2026-10-25","epss":0.00175,"percentile":0.06929}],"risk":0.09756250000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/705890061467ad550ecc1dad5eea07f28ccfb43e","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9a3202a98b2e095b54dd784c3e01a09a676fc3fa","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c22667d0fd7916a33fd3e79685b7246fc48f1a62","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23896","https://www.vulncheck.com/advisories/ffmpeg-uninitialized-heap-memory-read-in-screenpresso-decoder"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70630","description":"FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read vulnerability in the native Screenpresso decoder (libavcodec/screenpresso.c) that allows attackers to recover sensitive memory contents by supplying a crafted SPV1 packet with a valid zlib stream that decompresses fewer bytes than the full frame requires. The screenpresso_decode_frame() function fails to validate the produced byte count before calling av_image_copy_plane() to copy the complete frame dimensions from the persistent ctx->inflated_buf buffer, causing unwritten heap memory from prior allocations or prior frames to be copied into decoded output and potentially exposing sensitive data such as userspace addresses from persistent decoding services."},"relatedVulnerabilities":[]},{"artifact":{"id":"6cbaeeeea060a21f","cpes":["cpe:2.3:a:alsa-project:alsa-lib:1.2.16.1-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa-project:alsa_lib:1.2.16.1-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_project:alsa-lib:1.2.16.1-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_project:alsa_lib:1.2.16.1-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa-lib:alsa-lib:1.2.16.1-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa-lib:alsa_lib:1.2.16.1-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_lib:alsa-lib:1.2.16.1-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_lib:alsa_lib:1.2.16.1-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa:alsa-lib:1.2.16.1-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa:alsa_lib:1.2.16.1-r0:*:*:*:*:*:*:*"],"name":"alsa-lib","purl":"pkg:apk/alpine/alsa-lib@1.2.16.1-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"1.2.16.1-r0","language":"","licenses":["LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/alsa"},{"path":"/etc/alsa/conf.d"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/aserver"},{"path":"/usr/lib"},{"path":"/usr/lib/libasound.so.2"},{"path":"/usr/lib/libasound.so.2.0.0"},{"path":"/usr/lib/libatopology.so.2"},{"path":"/usr/lib/libatopology.so.2.0.0"},{"path":"/usr/share"},{"path":"/usr/share/alsa"},{"path":"/usr/share/alsa/alsa.conf"},{"path":"/usr/share/alsa/cards"},{"path":"/usr/share/alsa/cards/AACI.conf"},{"path":"/usr/share/alsa/cards/ATIIXP-MODEM.conf"},{"path":"/usr/share/alsa/cards/ATIIXP-SPDMA.conf"},{"path":"/usr/share/alsa/cards/ATIIXP.conf"},{"path":"/usr/share/alsa/cards/AU8810.conf"},{"path":"/usr/share/alsa/cards/AU8820.conf"},{"path":"/usr/share/alsa/cards/AU8830.conf"},{"path":"/usr/share/alsa/cards/Audigy.conf"},{"path":"/usr/share/alsa/cards/Audigy2.conf"},{"path":"/usr/share/alsa/cards/Aureon51.conf"},{"path":"/usr/share/alsa/cards/Aureon71.conf"},{"path":"/usr/share/alsa/cards/CA0106.conf"},{"path":"/usr/share/alsa/cards/CMI8338-SWIEC.conf"},{"path":"/usr/share/alsa/cards/CMI8338.conf"},{"path":"/usr/share/alsa/cards/CMI8738-MC6.conf"},{"path":"/usr/share/alsa/cards/CMI8738-MC8.conf"},{"path":"/usr/share/alsa/cards/CMI8788.conf"},{"path":"/usr/share/alsa/cards/CS46xx.conf"},{"path":"/usr/share/alsa/cards/EMU10K1.conf"},{"path":"/usr/share/alsa/cards/EMU10K1X.conf"},{"path":"/usr/share/alsa/cards/ENS1370.conf"},{"path":"/usr/share/alsa/cards/ENS1371.conf"},{"path":"/usr/share/alsa/cards/ES1968.conf"},{"path":"/usr/share/alsa/cards/Echo_Echo3G.conf"},{"path":"/usr/share/alsa/cards/FM801.conf"},{"path":"/usr/share/alsa/cards/FWSpeakers.conf"},{"path":"/usr/share/alsa/cards/FireWave.conf"},{"path":"/usr/share/alsa/cards/GUS.conf"},{"path":"/usr/share/alsa/cards/HDA-Intel.conf"},{"path":"/usr/share/alsa/cards/HdmiLpeAudio.conf"},{"path":"/usr/share/alsa/cards/ICE1712.conf"},{"path":"/usr/share/alsa/cards/ICE1724.conf"},{"path":"/usr/share/alsa/cards/ICH-MODEM.conf"},{"path":"/usr/share/alsa/cards/ICH.conf"},{"path":"/usr/share/alsa/cards/ICH4.conf"},{"path":"/usr/share/alsa/cards/Loopback.conf"},{"path":"/usr/share/alsa/cards/Maestro3.conf"},{"path":"/usr/share/alsa/cards/NFORCE.conf"},{"path":"/usr/share/alsa/cards/PC-Speaker.conf"},{"path":"/usr/share/alsa/cards/PMac.conf"},{"path":"/usr/share/alsa/cards/PMacToonie.conf"},{"path":"/usr/share/alsa/cards/PS3.conf"},{"path":"/usr/share/alsa/cards/RME9636.conf"},{"path":"/usr/share/alsa/cards/RME9652.conf"},{"path":"/usr/share/alsa/cards/SB-XFi.conf"},{"path":"/usr/share/alsa/cards/SI7018.conf"},{"path":"/usr/share/alsa/cards/TRID4DWAVENX.conf"},{"path":"/usr/share/alsa/cards/USB-Audio.conf"},{"path":"/usr/share/alsa/cards/VIA686A.conf"},{"path":"/usr/share/alsa/cards/VIA8233.conf"},{"path":"/usr/share/alsa/cards/VIA8233A.conf"},{"path":"/usr/share/alsa/cards/VIA8237.conf"},{"path":"/usr/share/alsa/cards/VX222.conf"},{"path":"/usr/share/alsa/cards/VXPocket.conf"},{"path":"/usr/share/alsa/cards/VXPocket440.conf"},{"path":"/usr/share/alsa/cards/YMF744.conf"},{"path":"/usr/share/alsa/cards/aliases.conf"},{"path":"/usr/share/alsa/cards/pistachio-card.conf"},{"path":"/usr/share/alsa/cards/vc4-hdmi.conf"},{"path":"/usr/share/alsa/ctl"},{"path":"/usr/share/alsa/ctl/default.conf"},{"path":"/usr/share/alsa/pcm"},{"path":"/usr/share/alsa/pcm/center_lfe.conf"},{"path":"/usr/share/alsa/pcm/default.conf"},{"path":"/usr/share/alsa/pcm/dmix.conf"},{"path":"/usr/share/alsa/pcm/dpl.conf"},{"path":"/usr/share/alsa/pcm/dsnoop.conf"},{"path":"/usr/share/alsa/pcm/front.conf"},{"path":"/usr/share/alsa/pcm/hdmi.conf"},{"path":"/usr/share/alsa/pcm/iec958.conf"},{"path":"/usr/share/alsa/pcm/modem.conf"},{"path":"/usr/share/alsa/pcm/rear.conf"},{"path":"/usr/share/alsa/pcm/side.conf"},{"path":"/usr/share/alsa/pcm/surround21.conf"},{"path":"/usr/share/alsa/pcm/surround40.conf"},{"path":"/usr/share/alsa/pcm/surround41.conf"},{"path":"/usr/share/alsa/pcm/surround50.conf"},{"path":"/usr/share/alsa/pcm/surround51.conf"},{"path":"/usr/share/alsa/pcm/surround71.conf"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"alsa-lib"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:alsa-project:alsa-lib:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-90781","versionConstraint":"<= 1.2.16.1 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:alsa-project:alsa-lib:1.2.16.1:*:*:*:*:*:*:*"],"package":{"name":"alsa-lib","version":"1.2.16.1-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-90781","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":4.4,"impactScore":2.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-90781","cwe":"CWE-193","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-90781","date":"2026-10-25","epss":0.00179,"percentile":0.07421}],"risk":0.08592,"urls":["https://github.com/alsa-project/alsa-lib","https://github.com/alsa-project/alsa-lib/blob/v1.2.16.1/src/control/ctlparse.c#L216-L241","https://github.com/alsa-project/alsa-lib/commit/f84cd4ced7b36fddb8e4ee24404cf7c091d27020","https://lore.kernel.org/alsa-devel/CACBQ=P2FhO3M6dkv3cWuKb6Qhs92ouV+FJ3SJZ_PVBSSdJWRAQ@mail.gmail.com/","https://www.vulncheck.com/advisories/alsa-lib-through-1.2.16.1-off-by-one-stack-buffer-overflow-in-snd-ctl-ascii-elem-id-parse"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-90781","description":"alsa-lib through 1.2.16.1 contains a stack buffer overflow in the __snd_ctl_ascii_elem_id_parse() function that writes one byte past a 64-byte buffer when parsing a name= field with 64 or more characters. Attackers can supply a long control-element identifier string through saved state files or command-line arguments to overwrite adjacent stack memory and crash the calling process."},"relatedVulnerabilities":[]},{"artifact":{"id":"d690b425b757db47","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-52295","versionConstraint":"< 9.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-52295","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.2,"impactScore":3.6,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":2.9,"impactScore":1.5,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-52295","cwe":"CWE-125","type":"Primary","source":"cve@mitre.org"},{"cve":"CVE-2026-52295","cwe":"CWE-120","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-52295","date":"2026-10-25","epss":0.00176,"percentile":0.07052}],"risk":0.08404,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22988","https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/8439e0203744a30d280668fcd086f74ed5001da1","https://github.com/Kenan-Kamel/VulnerabilitiesReference/tree/main/FFmpeg/ExtradataPadding"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-52295","description":"FFmpeg before 9.0 has an out-of-bounds read because the copied extradata lacked required padding before GetBitContext-based access in libavformat/iamf_writer.c."},"relatedVulnerabilities":[]},{"artifact":{"id":"243e974ceb6a5245","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-52295","versionConstraint":"< 9.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-52295","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.2,"impactScore":3.6,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":2.9,"impactScore":1.5,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-52295","cwe":"CWE-125","type":"Primary","source":"cve@mitre.org"},{"cve":"CVE-2026-52295","cwe":"CWE-120","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-52295","date":"2026-10-25","epss":0.00176,"percentile":0.07052}],"risk":0.08404,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22988","https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/8439e0203744a30d280668fcd086f74ed5001da1","https://github.com/Kenan-Kamel/VulnerabilitiesReference/tree/main/FFmpeg/ExtradataPadding"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-52295","description":"FFmpeg before 9.0 has an out-of-bounds read because the copied extradata lacked required padding before GetBitContext-based access in libavformat/iamf_writer.c."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6896ca1d5ee5394","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-52295","versionConstraint":"< 9.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-52295","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.2,"impactScore":3.6,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":2.9,"impactScore":1.5,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-52295","cwe":"CWE-125","type":"Primary","source":"cve@mitre.org"},{"cve":"CVE-2026-52295","cwe":"CWE-120","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-52295","date":"2026-10-25","epss":0.00176,"percentile":0.07052}],"risk":0.08404,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22988","https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/8439e0203744a30d280668fcd086f74ed5001da1","https://github.com/Kenan-Kamel/VulnerabilitiesReference/tree/main/FFmpeg/ExtradataPadding"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-52295","description":"FFmpeg before 9.0 has an out-of-bounds read because the copied extradata lacked required padding before GetBitContext-based access in libavformat/iamf_writer.c."},"relatedVulnerabilities":[]},{"artifact":{"id":"1c27d303595909ee","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-52295","versionConstraint":"< 9.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-52295","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.2,"impactScore":3.6,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":2.9,"impactScore":1.5,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-52295","cwe":"CWE-125","type":"Primary","source":"cve@mitre.org"},{"cve":"CVE-2026-52295","cwe":"CWE-120","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-52295","date":"2026-10-25","epss":0.00176,"percentile":0.07052}],"risk":0.08404,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22988","https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/8439e0203744a30d280668fcd086f74ed5001da1","https://github.com/Kenan-Kamel/VulnerabilitiesReference/tree/main/FFmpeg/ExtradataPadding"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-52295","description":"FFmpeg before 9.0 has an out-of-bounds read because the copied extradata lacked required padding before GetBitContext-based access in libavformat/iamf_writer.c."},"relatedVulnerabilities":[]},{"artifact":{"id":"d690b425b757db47","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-96611","versionConstraint":"< 9.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-96611","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","metrics":{"baseScore":6.9,"impactScore":5.5,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-96611","cwe":"CWE-190","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-96611","date":"2026-10-25","epss":0.00108,"percentile":0.01192}],"risk":0.08019,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/059eb2e853c1f62b8df1b73be9318061a7a21b0b","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23455"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-96611","description":"FFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c. In mov_read_ispe(), uint32_t width/height values from a crafted HEIF ispe box are stored into signed int fields without bounds checking, allowing values exceeding INT_MAX to become negative. In read_image_grid(), accumulating these values causes signed integer overflow (undefined behavior per C17 section 6.5), which on x86 wraps to a small positive value, bypassing downstream validity checks."},"relatedVulnerabilities":[]},{"artifact":{"id":"243e974ceb6a5245","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-96611","versionConstraint":"< 9.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-96611","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","metrics":{"baseScore":6.9,"impactScore":5.5,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-96611","cwe":"CWE-190","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-96611","date":"2026-10-25","epss":0.00108,"percentile":0.01192}],"risk":0.08019,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/059eb2e853c1f62b8df1b73be9318061a7a21b0b","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23455"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-96611","description":"FFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c. In mov_read_ispe(), uint32_t width/height values from a crafted HEIF ispe box are stored into signed int fields without bounds checking, allowing values exceeding INT_MAX to become negative. In read_image_grid(), accumulating these values causes signed integer overflow (undefined behavior per C17 section 6.5), which on x86 wraps to a small positive value, bypassing downstream validity checks."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6896ca1d5ee5394","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-96611","versionConstraint":"< 9.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-96611","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","metrics":{"baseScore":6.9,"impactScore":5.5,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-96611","cwe":"CWE-190","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-96611","date":"2026-10-25","epss":0.00108,"percentile":0.01192}],"risk":0.08019,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/059eb2e853c1f62b8df1b73be9318061a7a21b0b","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23455"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-96611","description":"FFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c. In mov_read_ispe(), uint32_t width/height values from a crafted HEIF ispe box are stored into signed int fields without bounds checking, allowing values exceeding INT_MAX to become negative. In read_image_grid(), accumulating these values causes signed integer overflow (undefined behavior per C17 section 6.5), which on x86 wraps to a small positive value, bypassing downstream validity checks."},"relatedVulnerabilities":[]},{"artifact":{"id":"1c27d303595909ee","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-96611","versionConstraint":"< 9.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-96611","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","metrics":{"baseScore":6.9,"impactScore":5.5,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-96611","cwe":"CWE-190","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-96611","date":"2026-10-25","epss":0.00108,"percentile":0.01192}],"risk":0.08019,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/059eb2e853c1f62b8df1b73be9318061a7a21b0b","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23455"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-96611","description":"FFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c. In mov_read_ispe(), uint32_t width/height values from a crafted HEIF ispe box are stored into signed int fields without bounds checking, allowing values exceeding INT_MAX to become negative. In read_image_grid(), accumulating these values causes signed integer overflow (undefined behavior per C17 section 6.5), which on x86 wraps to a small positive value, bypassing downstream validity checks."},"relatedVulnerabilities":[]},{"artifact":{"id":"d690b425b757db47","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-52297","versionConstraint":"< 9.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-52297","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":5.2,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":2.9,"impactScore":1.5,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-52297","cwe":"CWE-125","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-52297","date":"2026-10-25","epss":0.00116,"percentile":0.01592}],"risk":0.0725,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22988","https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/8439e0203744a30d280668fcd086f74ed5001da1","https://github.com/Kenan-Kamel/VulnerabilitiesReference/tree/main/FFmpeg/ExtradataPadding"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-52297","description":"FFmpeg before 9.0 has an out-of-bounds read because there is insufficiently padded extradata in the MOV parsing path in mov_read_iacb in libavformat/mov.c."},"relatedVulnerabilities":[]},{"artifact":{"id":"243e974ceb6a5245","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-52297","versionConstraint":"< 9.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-52297","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":5.2,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":2.9,"impactScore":1.5,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-52297","cwe":"CWE-125","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-52297","date":"2026-10-25","epss":0.00116,"percentile":0.01592}],"risk":0.0725,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22988","https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/8439e0203744a30d280668fcd086f74ed5001da1","https://github.com/Kenan-Kamel/VulnerabilitiesReference/tree/main/FFmpeg/ExtradataPadding"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-52297","description":"FFmpeg before 9.0 has an out-of-bounds read because there is insufficiently padded extradata in the MOV parsing path in mov_read_iacb in libavformat/mov.c."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6896ca1d5ee5394","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-52297","versionConstraint":"< 9.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-52297","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":5.2,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":2.9,"impactScore":1.5,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-52297","cwe":"CWE-125","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-52297","date":"2026-10-25","epss":0.00116,"percentile":0.01592}],"risk":0.0725,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22988","https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/8439e0203744a30d280668fcd086f74ed5001da1","https://github.com/Kenan-Kamel/VulnerabilitiesReference/tree/main/FFmpeg/ExtradataPadding"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-52297","description":"FFmpeg before 9.0 has an out-of-bounds read because there is insufficiently padded extradata in the MOV parsing path in mov_read_iacb in libavformat/mov.c."},"relatedVulnerabilities":[]},{"artifact":{"id":"1c27d303595909ee","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-52297","versionConstraint":"< 9.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-52297","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":5.2,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":2.9,"impactScore":1.5,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-52297","cwe":"CWE-125","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-52297","date":"2026-10-25","epss":0.00116,"percentile":0.01592}],"risk":0.0725,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22988","https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/8439e0203744a30d280668fcd086f74ed5001da1","https://github.com/Kenan-Kamel/VulnerabilitiesReference/tree/main/FFmpeg/ExtradataPadding"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-52297","description":"FFmpeg before 9.0 has an out-of-bounds read because there is insufficiently padded extradata in the MOV parsing path in mov_read_iacb in libavformat/mov.c."},"relatedVulnerabilities":[]},{"artifact":{"id":"d690b425b757db47","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107660","versionConstraint":"< 8.1.3||>= 9.0, < 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107660","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107660","cwe":"CWE-297","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107660","date":"2026-10-25","epss":0.00136,"percentile":0.03002}],"risk":0.07174,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/0cd2a70eacd510c2efed48b9fc177c7cb2bc549f","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/57a2e704b4a6eda5d061b45aacde6b19c026bfc0","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/d377212904a19fc740d721cbda0ba58fa3805a29","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24383","https://ffmpeg.org/","https://github.com/FFmpeg/FFmpeg/blob/n9.0.1/libavformat/tls_mbedtls.c#L676-L681","https://www.vulncheck.com/advisories/ffmpeg-before-8.1.3-and-9-x-before-9.0.2-mbedtls-hostname-verification-bypass-for-ip-hosts"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107660","description":"FFmpeg before 8.1.3 and 9.x before 9.0.2 contains an improper certificate validation vulnerability in tls_open() of libavformat/tls_mbedtls.c, which skips hostname checks for IP-address hosts. Network attackers can intercept https, rtmps, or tls connections to IP-literal URLs with any trusted CA-issued certificate to read and tamper with streams."},"relatedVulnerabilities":[]},{"artifact":{"id":"243e974ceb6a5245","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107660","versionConstraint":"< 8.1.3||>= 9.0, < 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107660","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107660","cwe":"CWE-297","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107660","date":"2026-10-25","epss":0.00136,"percentile":0.03002}],"risk":0.07174,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/0cd2a70eacd510c2efed48b9fc177c7cb2bc549f","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/57a2e704b4a6eda5d061b45aacde6b19c026bfc0","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/d377212904a19fc740d721cbda0ba58fa3805a29","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24383","https://ffmpeg.org/","https://github.com/FFmpeg/FFmpeg/blob/n9.0.1/libavformat/tls_mbedtls.c#L676-L681","https://www.vulncheck.com/advisories/ffmpeg-before-8.1.3-and-9-x-before-9.0.2-mbedtls-hostname-verification-bypass-for-ip-hosts"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107660","description":"FFmpeg before 8.1.3 and 9.x before 9.0.2 contains an improper certificate validation vulnerability in tls_open() of libavformat/tls_mbedtls.c, which skips hostname checks for IP-address hosts. Network attackers can intercept https, rtmps, or tls connections to IP-literal URLs with any trusted CA-issued certificate to read and tamper with streams."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6896ca1d5ee5394","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107660","versionConstraint":"< 8.1.3||>= 9.0, < 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107660","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107660","cwe":"CWE-297","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107660","date":"2026-10-25","epss":0.00136,"percentile":0.03002}],"risk":0.07174,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/0cd2a70eacd510c2efed48b9fc177c7cb2bc549f","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/57a2e704b4a6eda5d061b45aacde6b19c026bfc0","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/d377212904a19fc740d721cbda0ba58fa3805a29","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24383","https://ffmpeg.org/","https://github.com/FFmpeg/FFmpeg/blob/n9.0.1/libavformat/tls_mbedtls.c#L676-L681","https://www.vulncheck.com/advisories/ffmpeg-before-8.1.3-and-9-x-before-9.0.2-mbedtls-hostname-verification-bypass-for-ip-hosts"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107660","description":"FFmpeg before 8.1.3 and 9.x before 9.0.2 contains an improper certificate validation vulnerability in tls_open() of libavformat/tls_mbedtls.c, which skips hostname checks for IP-address hosts. Network attackers can intercept https, rtmps, or tls connections to IP-literal URLs with any trusted CA-issued certificate to read and tamper with streams."},"relatedVulnerabilities":[]},{"artifact":{"id":"1c27d303595909ee","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107660","versionConstraint":"< 8.1.3||>= 9.0, < 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107660","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107660","cwe":"CWE-297","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107660","date":"2026-10-25","epss":0.00136,"percentile":0.03002}],"risk":0.07174,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/0cd2a70eacd510c2efed48b9fc177c7cb2bc549f","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/57a2e704b4a6eda5d061b45aacde6b19c026bfc0","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/d377212904a19fc740d721cbda0ba58fa3805a29","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24383","https://ffmpeg.org/","https://github.com/FFmpeg/FFmpeg/blob/n9.0.1/libavformat/tls_mbedtls.c#L676-L681","https://www.vulncheck.com/advisories/ffmpeg-before-8.1.3-and-9-x-before-9.0.2-mbedtls-hostname-verification-bypass-for-ip-hosts"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107660","description":"FFmpeg before 8.1.3 and 9.x before 9.0.2 contains an improper certificate validation vulnerability in tls_open() of libavformat/tls_mbedtls.c, which skips hostname checks for IP-address hosts. Network attackers can intercept https, rtmps, or tls connections to IP-literal URLs with any trusted CA-issued certificate to read and tamper with streams."},"relatedVulnerabilities":[]},{"artifact":{"id":"d690b425b757db47","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107677","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107677","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107677","cwe":"CWE-835","type":"Primary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107677","date":"2026-10-25","epss":0.00137,"percentile":0.03071}],"risk":0.06987,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/ed27bfcbbbc0872c0195eaf4dd2c0c93b9f1778e","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24592","https://ffmpeg.org/","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/dashdec.c#L1726","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavutil/avstring.c#L230-L238","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-dash-demuxer-infinite-loop-via-empty-segmenttemplate-media"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107677","description":"FFmpeg through 9.0.2 contains a denial of service vulnerability in the DASH demuxer that allows attackers to trigger an infinite loop by supplying an empty SegmentTemplate media URL. Attackers can craft an .mpd manifest declaring SegmentTemplate media=\"\" so get_current_fragment() calls av_strireplace() with an empty search string, consuming CPU indefinitely."},"relatedVulnerabilities":[]},{"artifact":{"id":"243e974ceb6a5245","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107677","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107677","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107677","cwe":"CWE-835","type":"Primary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107677","date":"2026-10-25","epss":0.00137,"percentile":0.03071}],"risk":0.06987,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/ed27bfcbbbc0872c0195eaf4dd2c0c93b9f1778e","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24592","https://ffmpeg.org/","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/dashdec.c#L1726","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavutil/avstring.c#L230-L238","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-dash-demuxer-infinite-loop-via-empty-segmenttemplate-media"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107677","description":"FFmpeg through 9.0.2 contains a denial of service vulnerability in the DASH demuxer that allows attackers to trigger an infinite loop by supplying an empty SegmentTemplate media URL. Attackers can craft an .mpd manifest declaring SegmentTemplate media=\"\" so get_current_fragment() calls av_strireplace() with an empty search string, consuming CPU indefinitely."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6896ca1d5ee5394","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107677","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107677","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107677","cwe":"CWE-835","type":"Primary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107677","date":"2026-10-25","epss":0.00137,"percentile":0.03071}],"risk":0.06987,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/ed27bfcbbbc0872c0195eaf4dd2c0c93b9f1778e","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24592","https://ffmpeg.org/","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/dashdec.c#L1726","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavutil/avstring.c#L230-L238","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-dash-demuxer-infinite-loop-via-empty-segmenttemplate-media"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107677","description":"FFmpeg through 9.0.2 contains a denial of service vulnerability in the DASH demuxer that allows attackers to trigger an infinite loop by supplying an empty SegmentTemplate media URL. Attackers can craft an .mpd manifest declaring SegmentTemplate media=\"\" so get_current_fragment() calls av_strireplace() with an empty search string, consuming CPU indefinitely."},"relatedVulnerabilities":[]},{"artifact":{"id":"1c27d303595909ee","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107677","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107677","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107677","cwe":"CWE-835","type":"Primary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107677","date":"2026-10-25","epss":0.00137,"percentile":0.03071}],"risk":0.06987,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/ed27bfcbbbc0872c0195eaf4dd2c0c93b9f1778e","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24592","https://ffmpeg.org/","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/dashdec.c#L1726","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavutil/avstring.c#L230-L238","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-dash-demuxer-infinite-loop-via-empty-segmenttemplate-media"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107677","description":"FFmpeg through 9.0.2 contains a denial of service vulnerability in the DASH demuxer that allows attackers to trigger an infinite loop by supplying an empty SegmentTemplate media URL. Attackers can craft an .mpd manifest declaring SegmentTemplate media=\"\" so get_current_fragment() calls av_strireplace() with an empty search string, consuming CPU indefinitely."},"relatedVulnerabilities":[]},{"artifact":{"id":"7b9198f90bc527d2","cpes":["cpe:2.3:a:OpenPrinting:cups-libs:2.4.20-r0:*:*:*:*:*:*:*","cpe:2.3:a:OpenPrinting:cups_libs:2.4.20-r0:*:*:*:*:*:*:*","cpe:2.3:a:cups-libs:cups-libs:2.4.20-r0:*:*:*:*:*:*:*","cpe:2.3:a:cups-libs:cups_libs:2.4.20-r0:*:*:*:*:*:*:*","cpe:2.3:a:cups_libs:cups-libs:2.4.20-r0:*:*:*:*:*:*:*","cpe:2.3:a:cups_libs:cups_libs:2.4.20-r0:*:*:*:*:*:*:*","cpe:2.3:a:cups:cups-libs:2.4.20-r0:*:*:*:*:*:*:*","cpe:2.3:a:cups:cups_libs:2.4.20-r0:*:*:*:*:*:*:*"],"name":"cups-libs","purl":"pkg:apk/alpine/cups-libs@2.4.20-r0?arch=x86_64&distro=alpine-3.24.2&upstream=cups","type":"apk","version":"2.4.20-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcups.so.2"},{"path":"/usr/lib/libcupsimage.so.2"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"cups"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openprinting:cups:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107885","versionConstraint":"< 2.4.21 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:OpenPrinting:cups:2.4.20:*:*:*:*:*:*:*"],"package":{"name":"cups","version":"2.4.20-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107885","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107885","cwe":"CWE-770","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-107885","date":"2026-10-25","epss":0.00147,"percentile":0.03918}],"risk":0.06909,"urls":["https://github.com/OpenPrinting/cups/security/advisories/GHSA-hhw5-qqmc-p6rg"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107885","description":"OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cupsdCheckJobs(). The scheduler suppresses timeout processing for all pending jobs whenever any client connection has an in-flight Send-Document operation, without matching that connection to the job being examined. A client allowed to reach the IPP service can hold an incomplete HTTP request containing parsed Send-Document headers before operation authorization, preventing unrelated incomplete jobs from expiring. Where Create-Job submission is allowed, incomplete jobs can accumulate until MaxJobs is exhausted and further legitimate print submissions are rejected. The suppression ends when the held connection closes."},"relatedVulnerabilities":[]},{"artifact":{"id":"d690b425b757db47","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107676","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107676","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107676","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107676","date":"2026-10-25","epss":0.00142,"percentile":0.03506}],"risk":0.064255,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/2c2f6e96e31795ae95a8f8323a493ffbc493111f","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24590","https://ffmpeg.org/","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavutil/hdr_dynamic_metadata.c#L374-L385","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-uninitialized-memory-disclosure-via-hdr10-metadata-serializer"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107676","description":"FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in av_dynamic_hdr_plus_to_t35() that leaves up to three payload bytes uninitialized when tone_mapping_flag is 0. Attackers can supply crafted Matroska T.35 BlockAdditional or HEVC/AV1 SEI metadata so that remuxing or transcoding writes leaked process memory into output files."},"relatedVulnerabilities":[]},{"artifact":{"id":"243e974ceb6a5245","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107676","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107676","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107676","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107676","date":"2026-10-25","epss":0.00142,"percentile":0.03506}],"risk":0.064255,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/2c2f6e96e31795ae95a8f8323a493ffbc493111f","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24590","https://ffmpeg.org/","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavutil/hdr_dynamic_metadata.c#L374-L385","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-uninitialized-memory-disclosure-via-hdr10-metadata-serializer"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107676","description":"FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in av_dynamic_hdr_plus_to_t35() that leaves up to three payload bytes uninitialized when tone_mapping_flag is 0. Attackers can supply crafted Matroska T.35 BlockAdditional or HEVC/AV1 SEI metadata so that remuxing or transcoding writes leaked process memory into output files."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6896ca1d5ee5394","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107676","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107676","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107676","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107676","date":"2026-10-25","epss":0.00142,"percentile":0.03506}],"risk":0.064255,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/2c2f6e96e31795ae95a8f8323a493ffbc493111f","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24590","https://ffmpeg.org/","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavutil/hdr_dynamic_metadata.c#L374-L385","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-uninitialized-memory-disclosure-via-hdr10-metadata-serializer"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107676","description":"FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in av_dynamic_hdr_plus_to_t35() that leaves up to three payload bytes uninitialized when tone_mapping_flag is 0. Attackers can supply crafted Matroska T.35 BlockAdditional or HEVC/AV1 SEI metadata so that remuxing or transcoding writes leaked process memory into output files."},"relatedVulnerabilities":[]},{"artifact":{"id":"1c27d303595909ee","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107676","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107676","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107676","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107676","date":"2026-10-25","epss":0.00142,"percentile":0.03506}],"risk":0.064255,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/2c2f6e96e31795ae95a8f8323a493ffbc493111f","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24590","https://ffmpeg.org/","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavutil/hdr_dynamic_metadata.c#L374-L385","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-uninitialized-memory-disclosure-via-hdr10-metadata-serializer"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107676","description":"FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in av_dynamic_hdr_plus_to_t35() that leaves up to three payload bytes uninitialized when tone_mapping_flag is 0. Attackers can supply crafted Matroska T.35 BlockAdditional or HEVC/AV1 SEI metadata so that remuxing or transcoding writes leaked process memory into output files."},"relatedVulnerabilities":[]},{"artifact":{"id":"6cbaeeeea060a21f","cpes":["cpe:2.3:a:alsa-project:alsa-lib:1.2.16.1-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa-project:alsa_lib:1.2.16.1-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_project:alsa-lib:1.2.16.1-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_project:alsa_lib:1.2.16.1-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa-lib:alsa-lib:1.2.16.1-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa-lib:alsa_lib:1.2.16.1-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_lib:alsa-lib:1.2.16.1-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_lib:alsa_lib:1.2.16.1-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa:alsa-lib:1.2.16.1-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa:alsa_lib:1.2.16.1-r0:*:*:*:*:*:*:*"],"name":"alsa-lib","purl":"pkg:apk/alpine/alsa-lib@1.2.16.1-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"1.2.16.1-r0","language":"","licenses":["LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/alsa"},{"path":"/etc/alsa/conf.d"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/aserver"},{"path":"/usr/lib"},{"path":"/usr/lib/libasound.so.2"},{"path":"/usr/lib/libasound.so.2.0.0"},{"path":"/usr/lib/libatopology.so.2"},{"path":"/usr/lib/libatopology.so.2.0.0"},{"path":"/usr/share"},{"path":"/usr/share/alsa"},{"path":"/usr/share/alsa/alsa.conf"},{"path":"/usr/share/alsa/cards"},{"path":"/usr/share/alsa/cards/AACI.conf"},{"path":"/usr/share/alsa/cards/ATIIXP-MODEM.conf"},{"path":"/usr/share/alsa/cards/ATIIXP-SPDMA.conf"},{"path":"/usr/share/alsa/cards/ATIIXP.conf"},{"path":"/usr/share/alsa/cards/AU8810.conf"},{"path":"/usr/share/alsa/cards/AU8820.conf"},{"path":"/usr/share/alsa/cards/AU8830.conf"},{"path":"/usr/share/alsa/cards/Audigy.conf"},{"path":"/usr/share/alsa/cards/Audigy2.conf"},{"path":"/usr/share/alsa/cards/Aureon51.conf"},{"path":"/usr/share/alsa/cards/Aureon71.conf"},{"path":"/usr/share/alsa/cards/CA0106.conf"},{"path":"/usr/share/alsa/cards/CMI8338-SWIEC.conf"},{"path":"/usr/share/alsa/cards/CMI8338.conf"},{"path":"/usr/share/alsa/cards/CMI8738-MC6.conf"},{"path":"/usr/share/alsa/cards/CMI8738-MC8.conf"},{"path":"/usr/share/alsa/cards/CMI8788.conf"},{"path":"/usr/share/alsa/cards/CS46xx.conf"},{"path":"/usr/share/alsa/cards/EMU10K1.conf"},{"path":"/usr/share/alsa/cards/EMU10K1X.conf"},{"path":"/usr/share/alsa/cards/ENS1370.conf"},{"path":"/usr/share/alsa/cards/ENS1371.conf"},{"path":"/usr/share/alsa/cards/ES1968.conf"},{"path":"/usr/share/alsa/cards/Echo_Echo3G.conf"},{"path":"/usr/share/alsa/cards/FM801.conf"},{"path":"/usr/share/alsa/cards/FWSpeakers.conf"},{"path":"/usr/share/alsa/cards/FireWave.conf"},{"path":"/usr/share/alsa/cards/GUS.conf"},{"path":"/usr/share/alsa/cards/HDA-Intel.conf"},{"path":"/usr/share/alsa/cards/HdmiLpeAudio.conf"},{"path":"/usr/share/alsa/cards/ICE1712.conf"},{"path":"/usr/share/alsa/cards/ICE1724.conf"},{"path":"/usr/share/alsa/cards/ICH-MODEM.conf"},{"path":"/usr/share/alsa/cards/ICH.conf"},{"path":"/usr/share/alsa/cards/ICH4.conf"},{"path":"/usr/share/alsa/cards/Loopback.conf"},{"path":"/usr/share/alsa/cards/Maestro3.conf"},{"path":"/usr/share/alsa/cards/NFORCE.conf"},{"path":"/usr/share/alsa/cards/PC-Speaker.conf"},{"path":"/usr/share/alsa/cards/PMac.conf"},{"path":"/usr/share/alsa/cards/PMacToonie.conf"},{"path":"/usr/share/alsa/cards/PS3.conf"},{"path":"/usr/share/alsa/cards/RME9636.conf"},{"path":"/usr/share/alsa/cards/RME9652.conf"},{"path":"/usr/share/alsa/cards/SB-XFi.conf"},{"path":"/usr/share/alsa/cards/SI7018.conf"},{"path":"/usr/share/alsa/cards/TRID4DWAVENX.conf"},{"path":"/usr/share/alsa/cards/USB-Audio.conf"},{"path":"/usr/share/alsa/cards/VIA686A.conf"},{"path":"/usr/share/alsa/cards/VIA8233.conf"},{"path":"/usr/share/alsa/cards/VIA8233A.conf"},{"path":"/usr/share/alsa/cards/VIA8237.conf"},{"path":"/usr/share/alsa/cards/VX222.conf"},{"path":"/usr/share/alsa/cards/VXPocket.conf"},{"path":"/usr/share/alsa/cards/VXPocket440.conf"},{"path":"/usr/share/alsa/cards/YMF744.conf"},{"path":"/usr/share/alsa/cards/aliases.conf"},{"path":"/usr/share/alsa/cards/pistachio-card.conf"},{"path":"/usr/share/alsa/cards/vc4-hdmi.conf"},{"path":"/usr/share/alsa/ctl"},{"path":"/usr/share/alsa/ctl/default.conf"},{"path":"/usr/share/alsa/pcm"},{"path":"/usr/share/alsa/pcm/center_lfe.conf"},{"path":"/usr/share/alsa/pcm/default.conf"},{"path":"/usr/share/alsa/pcm/dmix.conf"},{"path":"/usr/share/alsa/pcm/dpl.conf"},{"path":"/usr/share/alsa/pcm/dsnoop.conf"},{"path":"/usr/share/alsa/pcm/front.conf"},{"path":"/usr/share/alsa/pcm/hdmi.conf"},{"path":"/usr/share/alsa/pcm/iec958.conf"},{"path":"/usr/share/alsa/pcm/modem.conf"},{"path":"/usr/share/alsa/pcm/rear.conf"},{"path":"/usr/share/alsa/pcm/side.conf"},{"path":"/usr/share/alsa/pcm/surround21.conf"},{"path":"/usr/share/alsa/pcm/surround40.conf"},{"path":"/usr/share/alsa/pcm/surround41.conf"},{"path":"/usr/share/alsa/pcm/surround50.conf"},{"path":"/usr/share/alsa/pcm/surround51.conf"},{"path":"/usr/share/alsa/pcm/surround71.conf"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"alsa-lib"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:alsa-project:alsa-lib:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-96674","versionConstraint":"<= 1.2.16.1 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:alsa-project:alsa-lib:1.2.16.1:*:*:*:*:*:*:*"],"package":{"name":"alsa-lib","version":"1.2.16.1-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-96674","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","metrics":{"baseScore":4.4,"impactScore":2.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-96674","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-96674","date":"2026-10-25","epss":0.00115,"percentile":0.01548}],"risk":0.0552,"urls":["https://github.com/alsa-project/alsa-lib","https://github.com/alsa-project/alsa-lib/blob/v1.2.16.1/src/topology/ctl.c#L1316-L1326","https://github.com/alsa-project/alsa-lib/blob/v1.2.16.1/src/topology/ctl.c#L1420-L1430","https://github.com/alsa-project/alsa-lib/blob/v1.2.16.1/src/topology/ctl.c#L1511-L1521","https://github.com/alsa-project/alsa-lib/pull/527","https://www.vulncheck.com/advisories/alsa-lib-through-1.2.16.1-integer-overflow-via-topology-file"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-96674","description":"alsa-lib through 1.2.16.1 computes combined topology element size using 32-bit arithmetic in src/topology/ctl.c, allowing integer overflow that defeats bounds checks. Attackers can supply crafted topology files that wrap size calculations, causing the decoder to read beyond the topology buffer and potentially leak sensitive data or crash the application."},"relatedVulnerabilities":[]},{"artifact":{"id":"6cbaeeeea060a21f","cpes":["cpe:2.3:a:alsa-project:alsa-lib:1.2.16.1-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa-project:alsa_lib:1.2.16.1-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_project:alsa-lib:1.2.16.1-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_project:alsa_lib:1.2.16.1-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa-lib:alsa-lib:1.2.16.1-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa-lib:alsa_lib:1.2.16.1-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_lib:alsa-lib:1.2.16.1-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_lib:alsa_lib:1.2.16.1-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa:alsa-lib:1.2.16.1-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa:alsa_lib:1.2.16.1-r0:*:*:*:*:*:*:*"],"name":"alsa-lib","purl":"pkg:apk/alpine/alsa-lib@1.2.16.1-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"1.2.16.1-r0","language":"","licenses":["LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/alsa"},{"path":"/etc/alsa/conf.d"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/aserver"},{"path":"/usr/lib"},{"path":"/usr/lib/libasound.so.2"},{"path":"/usr/lib/libasound.so.2.0.0"},{"path":"/usr/lib/libatopology.so.2"},{"path":"/usr/lib/libatopology.so.2.0.0"},{"path":"/usr/share"},{"path":"/usr/share/alsa"},{"path":"/usr/share/alsa/alsa.conf"},{"path":"/usr/share/alsa/cards"},{"path":"/usr/share/alsa/cards/AACI.conf"},{"path":"/usr/share/alsa/cards/ATIIXP-MODEM.conf"},{"path":"/usr/share/alsa/cards/ATIIXP-SPDMA.conf"},{"path":"/usr/share/alsa/cards/ATIIXP.conf"},{"path":"/usr/share/alsa/cards/AU8810.conf"},{"path":"/usr/share/alsa/cards/AU8820.conf"},{"path":"/usr/share/alsa/cards/AU8830.conf"},{"path":"/usr/share/alsa/cards/Audigy.conf"},{"path":"/usr/share/alsa/cards/Audigy2.conf"},{"path":"/usr/share/alsa/cards/Aureon51.conf"},{"path":"/usr/share/alsa/cards/Aureon71.conf"},{"path":"/usr/share/alsa/cards/CA0106.conf"},{"path":"/usr/share/alsa/cards/CMI8338-SWIEC.conf"},{"path":"/usr/share/alsa/cards/CMI8338.conf"},{"path":"/usr/share/alsa/cards/CMI8738-MC6.conf"},{"path":"/usr/share/alsa/cards/CMI8738-MC8.conf"},{"path":"/usr/share/alsa/cards/CMI8788.conf"},{"path":"/usr/share/alsa/cards/CS46xx.conf"},{"path":"/usr/share/alsa/cards/EMU10K1.conf"},{"path":"/usr/share/alsa/cards/EMU10K1X.conf"},{"path":"/usr/share/alsa/cards/ENS1370.conf"},{"path":"/usr/share/alsa/cards/ENS1371.conf"},{"path":"/usr/share/alsa/cards/ES1968.conf"},{"path":"/usr/share/alsa/cards/Echo_Echo3G.conf"},{"path":"/usr/share/alsa/cards/FM801.conf"},{"path":"/usr/share/alsa/cards/FWSpeakers.conf"},{"path":"/usr/share/alsa/cards/FireWave.conf"},{"path":"/usr/share/alsa/cards/GUS.conf"},{"path":"/usr/share/alsa/cards/HDA-Intel.conf"},{"path":"/usr/share/alsa/cards/HdmiLpeAudio.conf"},{"path":"/usr/share/alsa/cards/ICE1712.conf"},{"path":"/usr/share/alsa/cards/ICE1724.conf"},{"path":"/usr/share/alsa/cards/ICH-MODEM.conf"},{"path":"/usr/share/alsa/cards/ICH.conf"},{"path":"/usr/share/alsa/cards/ICH4.conf"},{"path":"/usr/share/alsa/cards/Loopback.conf"},{"path":"/usr/share/alsa/cards/Maestro3.conf"},{"path":"/usr/share/alsa/cards/NFORCE.conf"},{"path":"/usr/share/alsa/cards/PC-Speaker.conf"},{"path":"/usr/share/alsa/cards/PMac.conf"},{"path":"/usr/share/alsa/cards/PMacToonie.conf"},{"path":"/usr/share/alsa/cards/PS3.conf"},{"path":"/usr/share/alsa/cards/RME9636.conf"},{"path":"/usr/share/alsa/cards/RME9652.conf"},{"path":"/usr/share/alsa/cards/SB-XFi.conf"},{"path":"/usr/share/alsa/cards/SI7018.conf"},{"path":"/usr/share/alsa/cards/TRID4DWAVENX.conf"},{"path":"/usr/share/alsa/cards/USB-Audio.conf"},{"path":"/usr/share/alsa/cards/VIA686A.conf"},{"path":"/usr/share/alsa/cards/VIA8233.conf"},{"path":"/usr/share/alsa/cards/VIA8233A.conf"},{"path":"/usr/share/alsa/cards/VIA8237.conf"},{"path":"/usr/share/alsa/cards/VX222.conf"},{"path":"/usr/share/alsa/cards/VXPocket.conf"},{"path":"/usr/share/alsa/cards/VXPocket440.conf"},{"path":"/usr/share/alsa/cards/YMF744.conf"},{"path":"/usr/share/alsa/cards/aliases.conf"},{"path":"/usr/share/alsa/cards/pistachio-card.conf"},{"path":"/usr/share/alsa/cards/vc4-hdmi.conf"},{"path":"/usr/share/alsa/ctl"},{"path":"/usr/share/alsa/ctl/default.conf"},{"path":"/usr/share/alsa/pcm"},{"path":"/usr/share/alsa/pcm/center_lfe.conf"},{"path":"/usr/share/alsa/pcm/default.conf"},{"path":"/usr/share/alsa/pcm/dmix.conf"},{"path":"/usr/share/alsa/pcm/dpl.conf"},{"path":"/usr/share/alsa/pcm/dsnoop.conf"},{"path":"/usr/share/alsa/pcm/front.conf"},{"path":"/usr/share/alsa/pcm/hdmi.conf"},{"path":"/usr/share/alsa/pcm/iec958.conf"},{"path":"/usr/share/alsa/pcm/modem.conf"},{"path":"/usr/share/alsa/pcm/rear.conf"},{"path":"/usr/share/alsa/pcm/side.conf"},{"path":"/usr/share/alsa/pcm/surround21.conf"},{"path":"/usr/share/alsa/pcm/surround40.conf"},{"path":"/usr/share/alsa/pcm/surround41.conf"},{"path":"/usr/share/alsa/pcm/surround50.conf"},{"path":"/usr/share/alsa/pcm/surround51.conf"},{"path":"/usr/share/alsa/pcm/surround71.conf"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"alsa-lib"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:alsa-project:alsa-lib:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-96675","versionConstraint":"<= 1.2.16.1 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:alsa-project:alsa-lib:1.2.16.1:*:*:*:*:*:*:*"],"package":{"name":"alsa-lib","version":"1.2.16.1-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-96675","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-96675","cwe":"CWE-129","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-96675","date":"2026-10-25","epss":0.00111,"percentile":0.01302}],"risk":0.05022750000000001,"urls":["https://github.com/alsa-project/alsa-lib","https://github.com/alsa-project/alsa-lib/blob/v1.2.16.1/src/pcm/pcm_multi.c#L1122-L1131","https://github.com/alsa-project/alsa-lib/pull/527","https://www.vulncheck.com/advisories/alsa-lib-through-1.2.16.1-denial-of-service-via-pcm-multi"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-96675","description":"alsa-lib through 1.2.16.1 contains a denial of service vulnerability in the multi PCM plugin that fails to validate sparse binding indices before array access. Attackers can supply a malicious ALSA configuration file with sparse bindings to trigger an out-of-bounds array read and assertion failure, causing the application to abort."},"relatedVulnerabilities":[]},{"artifact":{"id":"d690b425b757db47","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107678","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107678","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107678","cwe":"CWE-674","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107678","date":"2026-10-25","epss":0.00093,"percentile":0.00517}],"risk":0.04743000000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24593","https://ffmpeg.org/","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/mov.c#L8070","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavutil/encryption_info.c#L219-L231","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-stack-exhaustion-via-recursive-free-of-pssh-boxes"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107678","description":"FFmpeg through 9.0.2 contains a stack exhaustion vulnerability in av_encryption_init_info_free() in libavutil/encryption_info.c, which recursively frees AVEncryptionInitInfo linked lists built by the MOV demuxer's mov_read_pssh(). Attackers can supply a crafted MP4 file with tens of thousands of small pssh boxes to exhaust the stack and crash the process, while also causing quadratic CPU consumption."},"relatedVulnerabilities":[]},{"artifact":{"id":"243e974ceb6a5245","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107678","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107678","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107678","cwe":"CWE-674","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107678","date":"2026-10-25","epss":0.00093,"percentile":0.00517}],"risk":0.04743000000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24593","https://ffmpeg.org/","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/mov.c#L8070","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavutil/encryption_info.c#L219-L231","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-stack-exhaustion-via-recursive-free-of-pssh-boxes"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107678","description":"FFmpeg through 9.0.2 contains a stack exhaustion vulnerability in av_encryption_init_info_free() in libavutil/encryption_info.c, which recursively frees AVEncryptionInitInfo linked lists built by the MOV demuxer's mov_read_pssh(). Attackers can supply a crafted MP4 file with tens of thousands of small pssh boxes to exhaust the stack and crash the process, while also causing quadratic CPU consumption."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6896ca1d5ee5394","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107678","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107678","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107678","cwe":"CWE-674","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107678","date":"2026-10-25","epss":0.00093,"percentile":0.00517}],"risk":0.04743000000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24593","https://ffmpeg.org/","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/mov.c#L8070","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavutil/encryption_info.c#L219-L231","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-stack-exhaustion-via-recursive-free-of-pssh-boxes"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107678","description":"FFmpeg through 9.0.2 contains a stack exhaustion vulnerability in av_encryption_init_info_free() in libavutil/encryption_info.c, which recursively frees AVEncryptionInitInfo linked lists built by the MOV demuxer's mov_read_pssh(). Attackers can supply a crafted MP4 file with tens of thousands of small pssh boxes to exhaust the stack and crash the process, while also causing quadratic CPU consumption."},"relatedVulnerabilities":[]},{"artifact":{"id":"1c27d303595909ee","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r3:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r3:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r3?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r3","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107678","versionConstraint":"<= 9.0.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107678","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107678","cwe":"CWE-674","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107678","date":"2026-10-25","epss":0.00093,"percentile":0.00517}],"risk":0.04743000000000001,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24593","https://ffmpeg.org/","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/mov.c#L8070","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavutil/encryption_info.c#L219-L231","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-stack-exhaustion-via-recursive-free-of-pssh-boxes"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107678","description":"FFmpeg through 9.0.2 contains a stack exhaustion vulnerability in av_encryption_init_info_free() in libavutil/encryption_info.c, which recursively frees AVEncryptionInitInfo linked lists built by the MOV demuxer's mov_read_pssh(). Attackers can supply a crafted MP4 file with tens of thousands of small pssh boxes to exhaust the stack and crash the process, while also causing quadratic CPU consumption."},"relatedVulnerabilities":[]},{"artifact":{"id":"cbd77e4fe96fe423","cpes":["cpe:2.3:a:rust-random:rand:0.9.1:*:*:*:*:rust:*:*"],"name":"rand","purl":"pkg:cargo/rand@0.9.1","type":"rust-crate","version":"0.9.1","language":"rust","licenses":[],"locations":[{"path":"/usr/lib/librav1e.so.0.8.1","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/usr/lib/librav1e.so.0.8.1","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"0.9.3"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-cq8v-f236-94qc","versionConstraint":">=0.9.0,<0.9.3 (unknown)"},"matcher":"rust-matcher","searchedBy":{"package":{"name":"rand","version":"0.9.1"},"language":"rust","namespace":"github:language:rust"}}],"vulnerability":{"id":"GHSA-cq8v-f236-94qc","fix":{"state":"fixed","versions":["0.9.3"],"available":[{"date":"2026-04-14","kind":"first-observed","version":"0.9.3"}]},"cvss":[],"risk":0,"urls":["https://github.com/rust-random/rand/pull/1763","https://rustsec.org/advisories/RUSTSEC-2026-0097.html"],"severity":"Low","namespace":"github:language:rust","advisories":[],"dataSource":"https://github.com/advisories/GHSA-cq8v-f236-94qc","description":"Rand is unsound with a custom logger using rand::rng()"},"relatedVulnerabilities":[]},{"artifact":{"id":"01f97375dc010594","cpes":["cpe:2.3:a:golang:crypto:v0.56.0:*:*:*:*:go:*:*","cpe:2.3:a:go:ssh:v0.56.0:*:*:*:*:go:*:*"],"name":"golang.org/x/crypto","purl":"pkg:golang/golang.org/x/crypto@v0.56.0","type":"go-module","version":"v0.56.0","language":"go","licenses":[],"metadata":{"h1Digest":"h1:GUh5Ii4J5jtcseSMiRqr1jXCNHoxjeV9Fmekc2oLy6Y=","mainModule":"k6","architecture":"amd64","goCompiledVersion":"go1.26.10"},"locations":[{"path":"/usr/libexec/sm-k6/k6-v2","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/usr/libexec/sm-k6/k6-v2","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-5932","versionConstraint":"none (unknown)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/crypto","version":"v0.56.0"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-5932","fix":{"state":"","versions":[]},"cvss":[],"risk":0,"urls":[],"severity":"Unknown","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/issue/44226","description":"The golang.org/x/crypto/openpgp package is unsafe by design, has numerous known security issues, is not maintained, and should not be used.\n\nIf you are required to interoperate with OpenPGP systems and need a maintained package, consider github.com/ProtonMail/go-crypto/openpgp which is a maintained fork that aims to be a drop-in replacement for this package."},"relatedVulnerabilities":[]},{"artifact":{"id":"92d7c8f8c8658c32","cpes":["cpe:2.3:a:golang:crypto:v0.57.0:*:*:*:*:go:*:*","cpe:2.3:a:go:ssh:v0.57.0:*:*:*:*:go:*:*"],"name":"golang.org/x/crypto","purl":"pkg:golang/golang.org/x/crypto@v0.57.0","type":"go-module","version":"v0.57.0","language":"go","licenses":[],"metadata":{"h1Digest":"h1:3ZVCjf8Ggz7zneR/EHRVx68Ctf+2pmIMP2UFhh9cC6M=","mainModule":"github.com/grafana/synthetic-monitoring-agent","architecture":"amd64","goCompiledVersion":"go1.26.10"},"locations":[{"path":"/usr/local/bin/synthetic-monitoring-agent","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/usr/local/bin/synthetic-monitoring-agent","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-5932","versionConstraint":"none (unknown)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/crypto","version":"v0.57.0"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-5932","fix":{"state":"","versions":[]},"cvss":[],"risk":0,"urls":[],"severity":"Unknown","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/issue/44226","description":"The golang.org/x/crypto/openpgp package is unsafe by design, has numerous known security issues, is not maintained, and should not be used.\n\nIf you are required to interoperate with OpenPGP systems and need a maintained package, consider github.com/ProtonMail/go-crypto/openpgp which is a maintained fork that aims to be a drop-in replacement for this package."},"relatedVulnerabilities":[]},{"artifact":{"id":"d7476d9d31e0a122","cpes":["cpe:2.3:a:golang:crypto:v0.58.0:*:*:*:*:go:*:*","cpe:2.3:a:go:ssh:v0.58.0:*:*:*:*:go:*:*"],"name":"golang.org/x/crypto","purl":"pkg:golang/golang.org/x/crypto@v0.58.0","type":"go-module","version":"v0.58.0","language":"go","licenses":[],"metadata":{"h1Digest":"h1:COkYLr4k7nDI4r6QtMML2AfzeIswWHAJthLS6K/M/54=","mainModule":"k6","architecture":"amd64","goCompiledVersion":"go1.26.10"},"locations":[{"path":"/usr/libexec/sm-k6/k6-v1","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/usr/libexec/sm-k6/k6-v1","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-5932","versionConstraint":"none (unknown)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/crypto","version":"v0.58.0"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-5932","fix":{"state":"","versions":[]},"cvss":[],"risk":0,"urls":[],"severity":"Unknown","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/issue/44226","description":"The golang.org/x/crypto/openpgp package is unsafe by design, has numerous known security issues, is not maintained, and should not be used.\n\nIf you are required to interoperate with OpenPGP systems and need a maintained package, consider github.com/ProtonMail/go-crypto/openpgp which is a maintained fork that aims to be a drop-in replacement for this package."},"relatedVulnerabilities":[]},{"artifact":{"id":"3b2be12f9ca81c73","cpes":["cpe:2.3:a:musl-utils:musl-utils:1.2.6-r2:*:*:*:*:*:*:*","cpe:2.3:a:musl-utils:musl_utils:1.2.6-r2:*:*:*:*:*:*:*","cpe:2.3:a:musl_utils:musl-utils:1.2.6-r2:*:*:*:*:*:*:*","cpe:2.3:a:musl_utils:musl_utils:1.2.6-r2:*:*:*:*:*:*:*","cpe:2.3:a:musl-libc:musl-utils:1.2.6-r2:*:*:*:*:*:*:*","cpe:2.3:a:musl-libc:musl_utils:1.2.6-r2:*:*:*:*:*:*:*","cpe:2.3:a:musl:musl-utils:1.2.6-r2:*:*:*:*:*:*:*","cpe:2.3:a:musl:musl_utils:1.2.6-r2:*:*:*:*:*:*:*"],"name":"musl-utils","purl":"pkg:apk/alpine/musl-utils@1.2.6-r2?arch=x86_64&distro=alpine-3.24.2&upstream=musl","type":"apk","version":"1.2.6-r2","language":"","licenses":["MIT AND BSD-2-Clause AND GPL-2.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/sbin"},{"path":"/sbin/ldconfig"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/getconf"},{"path":"/usr/bin/getent"},{"path":"/usr/bin/iconv"},{"path":"/usr/bin/ldd"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:d9992e6b4c28653d10c222f154f8c913138d733f43179c5b9a3a0e6dedd9ad18","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"musl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.2.6-r3"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107891","versionConstraint":"< 1.2.6-r3 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.2"},"package":{"name":"musl","version":"1.2.6-r2"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-107891","fix":{"state":"fixed","versions":["1.2.6-r3"],"available":[{"date":"2026-10-22","kind":"first-observed","version":"1.2.6-r3"}]},"cvss":[],"risk":0,"urls":[],"severity":"Unknown","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-107891"},"relatedVulnerabilities":[{"id":"CVE-2026-107891","cvss":[],"urls":[],"severity":"Unknown","namespace":"nvd:cpe","dataSource":"nvd"}]}],"grade":"F","score":"0.00","as_of":"2026-10-26T09:22:45.487Z","grype_db_version":"2026-10-26T06:38:44.000Z"}