{"grype_matches":[{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87491","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87491","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87491","cwe":"CWE-787","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87491","date":"2026-10-09","epss":0.03142,"percentile":0.87544}],"risk":85.57500000000002,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/543557673","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-87491"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87491","description":"Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","knownExploited":[{"cve":"CVE-2026-87491","cwes":["CWE-787"],"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://nvd.nist.gov/vuln/detail/CVE-2026-87491"],"notes":"BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk","dueDate":"2026-09-23","product":"Chromium V8","dateAdded":"2026-09-09","vendorProject":"Google","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","knownRansomwareCampaignUse":"unknown"}]},"relatedVulnerabilities":[]},{"artifact":{"id":"9e813491f50ba632","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64831","versionConstraint":">= 8.0, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64831","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64831","cwe":"CWE-121","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64831","date":"2026-10-09","epss":0.00851,"percentile":0.56968}],"risk":0.6914375,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/92737390dc133daadce47dd7d2ec8ef3d9ebcbed","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23665","https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-vulkan-hevc-decoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64831","description":"FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vulkan HEVC hardware decoder that allows remote attackers to overwrite return addresses and adjacent stack frames by supplying a crafted HEVC/H.265 bitstream. Attackers can embed a malicious vps_num_hrd_parameters value exceeding HEVC_MAX_SUB_LAYERS in any supported container format to overflow stack-allocated arrays in the vk_hevc_end_frame function, potentially achieving arbitrary code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"d07d7332fd90e2f5","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64831","versionConstraint":">= 8.0, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64831","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64831","cwe":"CWE-121","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64831","date":"2026-10-09","epss":0.00851,"percentile":0.56968}],"risk":0.6914375,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/92737390dc133daadce47dd7d2ec8ef3d9ebcbed","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23665","https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-vulkan-hevc-decoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64831","description":"FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vulkan HEVC hardware decoder that allows remote attackers to overwrite return addresses and adjacent stack frames by supplying a crafted HEVC/H.265 bitstream. Attackers can embed a malicious vps_num_hrd_parameters value exceeding HEVC_MAX_SUB_LAYERS in any supported container format to overflow stack-allocated arrays in the vk_hevc_end_frame function, potentially achieving arbitrary code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"50075ec0b9beb4e7","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64831","versionConstraint":">= 8.0, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64831","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64831","cwe":"CWE-121","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64831","date":"2026-10-09","epss":0.00851,"percentile":0.56968}],"risk":0.6914375,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/92737390dc133daadce47dd7d2ec8ef3d9ebcbed","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23665","https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-vulkan-hevc-decoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64831","description":"FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vulkan HEVC hardware decoder that allows remote attackers to overwrite return addresses and adjacent stack frames by supplying a crafted HEVC/H.265 bitstream. Attackers can embed a malicious vps_num_hrd_parameters value exceeding HEVC_MAX_SUB_LAYERS in any supported container format to overflow stack-allocated arrays in the vk_hevc_end_frame function, potentially achieving arbitrary code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"15f575ddc365a154","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64831","versionConstraint":">= 8.0, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64831","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64831","cwe":"CWE-121","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64831","date":"2026-10-09","epss":0.00851,"percentile":0.56968}],"risk":0.6914375,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/92737390dc133daadce47dd7d2ec8ef3d9ebcbed","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23665","https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-vulkan-hevc-decoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64831","description":"FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vulkan HEVC hardware decoder that allows remote attackers to overwrite return addresses and adjacent stack frames by supplying a crafted HEVC/H.265 bitstream. Attackers can embed a malicious vps_num_hrd_parameters value exceeding HEVC_MAX_SUB_LAYERS in any supported container format to overflow stack-allocated arrays in the vk_hevc_end_frame function, potentially achieving arbitrary code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"9e813491f50ba632","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66040","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66040","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66040","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66040","date":"2026-10-09","epss":0.00776,"percentile":0.54471}],"risk":0.6311466666666667,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66040","description":"FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability in the native PNG and APNG encoders that allows remote attackers to corrupt heap memory by supplying a crafted PNG image with a malicious eXIf chunk. Attackers can craft an eXIf chunk where multiple IFD entries reference the same large value payload, causing canonical serialization to expand the output far beyond the undersized allocation estimated by add_exif_profile_size(), resulting in png_write_chunk() writing tens of thousands of bytes past the buffer boundary, leading to deterministic heap corruption, process crash, and potentially arbitrary code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"d07d7332fd90e2f5","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66040","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66040","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66040","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66040","date":"2026-10-09","epss":0.00776,"percentile":0.54471}],"risk":0.6311466666666667,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66040","description":"FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability in the native PNG and APNG encoders that allows remote attackers to corrupt heap memory by supplying a crafted PNG image with a malicious eXIf chunk. Attackers can craft an eXIf chunk where multiple IFD entries reference the same large value payload, causing canonical serialization to expand the output far beyond the undersized allocation estimated by add_exif_profile_size(), resulting in png_write_chunk() writing tens of thousands of bytes past the buffer boundary, leading to deterministic heap corruption, process crash, and potentially arbitrary code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"50075ec0b9beb4e7","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66040","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66040","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66040","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66040","date":"2026-10-09","epss":0.00776,"percentile":0.54471}],"risk":0.6311466666666667,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66040","description":"FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability in the native PNG and APNG encoders that allows remote attackers to corrupt heap memory by supplying a crafted PNG image with a malicious eXIf chunk. Attackers can craft an eXIf chunk where multiple IFD entries reference the same large value payload, causing canonical serialization to expand the output far beyond the undersized allocation estimated by add_exif_profile_size(), resulting in png_write_chunk() writing tens of thousands of bytes past the buffer boundary, leading to deterministic heap corruption, process crash, and potentially arbitrary code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"15f575ddc365a154","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66040","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66040","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66040","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66040","date":"2026-10-09","epss":0.00776,"percentile":0.54471}],"risk":0.6311466666666667,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66040","description":"FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability in the native PNG and APNG encoders that allows remote attackers to corrupt heap memory by supplying a crafted PNG image with a malicious eXIf chunk. Attackers can craft an eXIf chunk where multiple IFD entries reference the same large value payload, causing canonical serialization to expand the output far beyond the undersized allocation estimated by add_exif_profile_size(), resulting in png_write_chunk() writing tens of thousands of bytes past the buffer boundary, leading to deterministic heap corruption, process crash, and potentially arbitrary code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"9e813491f50ba632","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64834","versionConstraint":">= 0.6.3, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64834","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64834","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64834","date":"2026-10-09","epss":0.00727,"percentile":0.52765}],"risk":0.56706,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663","https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64834","description":"FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxer within libavformat/rtpdec_asf.c that allows remote attackers to cause denial of service by sending a crafted RTP/ASF stream. The rtp_asf_fix_header function fails to validate a minimum chunksize when iterating over ASF objects, causing the loop pointer to never advance when a chunksize is smaller than the 24-byte minimum ASF object header size, resulting in CPU exhaustion that denies service to legitimate users."},"relatedVulnerabilities":[]},{"artifact":{"id":"d07d7332fd90e2f5","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64834","versionConstraint":">= 0.6.3, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64834","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64834","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64834","date":"2026-10-09","epss":0.00727,"percentile":0.52765}],"risk":0.56706,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663","https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64834","description":"FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxer within libavformat/rtpdec_asf.c that allows remote attackers to cause denial of service by sending a crafted RTP/ASF stream. The rtp_asf_fix_header function fails to validate a minimum chunksize when iterating over ASF objects, causing the loop pointer to never advance when a chunksize is smaller than the 24-byte minimum ASF object header size, resulting in CPU exhaustion that denies service to legitimate users."},"relatedVulnerabilities":[]},{"artifact":{"id":"50075ec0b9beb4e7","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64834","versionConstraint":">= 0.6.3, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64834","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64834","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64834","date":"2026-10-09","epss":0.00727,"percentile":0.52765}],"risk":0.56706,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663","https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64834","description":"FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxer within libavformat/rtpdec_asf.c that allows remote attackers to cause denial of service by sending a crafted RTP/ASF stream. The rtp_asf_fix_header function fails to validate a minimum chunksize when iterating over ASF objects, causing the loop pointer to never advance when a chunksize is smaller than the 24-byte minimum ASF object header size, resulting in CPU exhaustion that denies service to legitimate users."},"relatedVulnerabilities":[]},{"artifact":{"id":"15f575ddc365a154","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64834","versionConstraint":">= 0.6.3, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64834","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64834","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64834","date":"2026-10-09","epss":0.00727,"percentile":0.52765}],"risk":0.56706,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663","https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64834","description":"FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxer within libavformat/rtpdec_asf.c that allows remote attackers to cause denial of service by sending a crafted RTP/ASF stream. The rtp_asf_fix_header function fails to validate a minimum chunksize when iterating over ASF objects, causing the loop pointer to never advance when a chunksize is smaller than the 24-byte minimum ASF object header size, resulting in CPU exhaustion that denies service to legitimate users."},"relatedVulnerabilities":[]},{"artifact":{"id":"5072120da1bad992","cpes":["cpe:2.3:a:DaveGamble:cjson:1.7.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cjson:cjson:1.7.19-r1:*:*:*:*:*:*:*"],"name":"cjson","purl":"pkg:apk/alpine/cjson@1.7.19-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"1.7.19-r1","language":"","licenses":["MIT"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcjson.so.1"},{"path":"/usr/lib/libcjson.so.1.7.19"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"cjson"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:davegamble:cjson:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-67215","versionConstraint":"<= 1.7.19 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:DaveGamble:cjson:1.7.19:*:*:*:*:*:*:*"],"package":{"name":"cjson","version":"1.7.19-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-67215","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-67215","cwe":"CWE-674","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-67215","date":"2026-10-09","epss":0.007,"percentile":0.51741}],"risk":0.546,"urls":["https://github.com/DaveGamble/cJSON/blob/v1.7.19/cJSON.c#L253-L261","https://github.com/DaveGamble/cJSON/blob/v1.7.19/cJSON_Utils.c#L906-L940","https://joshua.hu/cjson-json-parser-cve-vulnerabilities","https://www.vulncheck.com/advisories/cjson-json-patch-copy-add-uncontrolled-recursion-stack-exhaustion"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-67215","description":"cJSON through 1.7.19 is vulnerable to uncontrolled recursion leading to stack exhaustion when an untrusted RFC 6902 JSON Patch is applied via cJSONUtils_ApplyPatches() or cJSONUtils_ApplyPatchesCaseSensitive(). A patch containing add and copy operations grafts duplicated subtrees to amplify document depth beyond the parser's nesting limit: cJSON_Delete() recurses with no depth bound, and the cJSON_Duplicate() guard CJSON_CIRCULAR_LIMIT is set to 10000, ten times the parser's 1000-level nesting limit and high enough to overflow a default thread stack. An attacker who can supply the patch document can crash the process, resulting in denial of service."},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2015-1239","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2015-1239","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2015-1239","cwe":"CWE-415","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-1239","date":"2026-10-09","epss":0.01038,"percentile":0.62895}],"risk":0.53976,"urls":["https://bugs.chromium.org/p/chromium/issues/detail?id=430891","https://bugs.chromium.org/p/chromium/issues/detail?id=457493","https://lists.debian.org/debian-lts-announce/2018/07/msg00025.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2015-1239","description":"Double free vulnerability in the j2k_read_ppm_v3 function in OpenJPEG before r2997, as used in PDFium in Google Chrome, allows remote attackers to cause a denial of service (process crash) via a crafted PDF."},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87464","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87464","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87464","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87464","date":"2026-10-09","epss":0.00578,"percentile":0.45902}],"risk":0.53754,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/544163112","http://www.openwall.com/lists/oss-security/2026/09/10/17","https://chromium-review.googlesource.com/c/angle/angle/+/8266365"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87464","description":"Use after free in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"},"relatedVulnerabilities":[]},{"artifact":{"id":"9e813491f50ba632","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64830","versionConstraint":">= 2.1, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64830","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64830","cwe":"CWE-122","type":"Primary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64830","date":"2026-10-09","epss":0.00646,"percentile":0.49414}],"risk":0.524875,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657","https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64830","description":"FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjacent heap memory by supplying a malicious .sub/.idx subtitle file declaring more distinct stream IDs than the fixed-size array bounds in libavformat/mpeg.c. Attackers can craft a subtitle file with excessive distinct stream IDs to trigger unbounded writes beyond the vobsub->q[] array boundary via ff_subtitles_queue_insert(), potentially achieving arbitrary code execution in any application using FFmpeg's VobSub demuxer."},"relatedVulnerabilities":[]},{"artifact":{"id":"d07d7332fd90e2f5","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64830","versionConstraint":">= 2.1, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64830","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64830","cwe":"CWE-122","type":"Primary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64830","date":"2026-10-09","epss":0.00646,"percentile":0.49414}],"risk":0.524875,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657","https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64830","description":"FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjacent heap memory by supplying a malicious .sub/.idx subtitle file declaring more distinct stream IDs than the fixed-size array bounds in libavformat/mpeg.c. Attackers can craft a subtitle file with excessive distinct stream IDs to trigger unbounded writes beyond the vobsub->q[] array boundary via ff_subtitles_queue_insert(), potentially achieving arbitrary code execution in any application using FFmpeg's VobSub demuxer."},"relatedVulnerabilities":[]},{"artifact":{"id":"50075ec0b9beb4e7","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64830","versionConstraint":">= 2.1, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64830","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64830","cwe":"CWE-122","type":"Primary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64830","date":"2026-10-09","epss":0.00646,"percentile":0.49414}],"risk":0.524875,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657","https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64830","description":"FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjacent heap memory by supplying a malicious .sub/.idx subtitle file declaring more distinct stream IDs than the fixed-size array bounds in libavformat/mpeg.c. Attackers can craft a subtitle file with excessive distinct stream IDs to trigger unbounded writes beyond the vobsub->q[] array boundary via ff_subtitles_queue_insert(), potentially achieving arbitrary code execution in any application using FFmpeg's VobSub demuxer."},"relatedVulnerabilities":[]},{"artifact":{"id":"15f575ddc365a154","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64830","versionConstraint":">= 2.1, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64830","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64830","cwe":"CWE-122","type":"Primary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64830","date":"2026-10-09","epss":0.00646,"percentile":0.49414}],"risk":0.524875,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657","https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64830","description":"FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjacent heap memory by supplying a malicious .sub/.idx subtitle file declaring more distinct stream IDs than the fixed-size array bounds in libavformat/mpeg.c. Attackers can craft a subtitle file with excessive distinct stream IDs to trigger unbounded writes beyond the vobsub->q[] array boundary via ff_subtitles_queue_insert(), potentially achieving arbitrary code execution in any application using FFmpeg's VobSub demuxer."},"relatedVulnerabilities":[]},{"artifact":{"id":"c23e83d2851052a5","cpes":["cpe:2.3:a:google:grpc:v1.82.1:*:*:*:*:*:*:*"],"name":"google.golang.org/grpc","purl":"pkg:golang/google.golang.org/grpc@v1.82.1","type":"go-module","version":"v1.82.1","language":"go","licenses":[],"metadata":{"h1Digest":"h1:NnAxzGRA0677vCa4BUkOAnO5+FfQqVl9iUXeD0IqcGE=","mainModule":"k6","architecture":"amd64","goCompiledVersion":"go1.26.6"},"locations":[{"path":"/usr/libexec/sm-k6/k6-v1","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/usr/libexec/sm-k6/k6-v1","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.82.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-2v4p-qf9q-27wj","versionConstraint":"<1.82.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"google.golang.org/grpc","version":"v1.82.1"},"language":"go","namespace":"github:language:go"}}],"vulnerability":{"id":"GHSA-2v4p-qf9q-27wj","fix":{"state":"fixed","versions":["1.82.2"],"available":[{"date":"2026-09-09","kind":"first-observed","version":"1.82.2"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84445","cwe":"CWE-129","type":"Primary","source":"security-advisories@github.com"},{"cve":"CVE-2026-84445","cwe":"CWE-248","type":"Primary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-84445","date":"2026-10-09","epss":0.00641,"percentile":0.49166}],"risk":0.51921,"urls":["https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj","https://github.com/grpc/grpc-go/issues/9354","https://github.com/grpc/grpc-go/pull/9365","https://github.com/grpc/grpc-go/pull/9366","https://github.com/grpc/grpc-go/pull/9367","https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7","https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4","https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f","https://github.com/grpc/grpc-go/releases/tag/v1.82.2","https://github.com/grpc/grpc-go/releases/tag/v1.83.2","https://nvd.nist.gov/vuln/detail/CVE-2026-84445"],"severity":"High","namespace":"github:language:go","advisories":[],"dataSource":"https://github.com/advisories/GHSA-2v4p-qf9q-27wj","description":"gRPC-Go xDS servers: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers"},"relatedVulnerabilities":[{"id":"CVE-2026-84445","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84445","cwe":"CWE-129","type":"Primary","source":"security-advisories@github.com"},{"cve":"CVE-2026-84445","cwe":"CWE-248","type":"Primary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-84445","date":"2026-10-09","epss":0.00641,"percentile":0.49166}],"urls":["https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7","https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4","https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f","https://github.com/grpc/grpc-go/issues/9354","https://github.com/grpc/grpc-go/pull/9365","https://github.com/grpc/grpc-go/pull/9366","https://github.com/grpc/grpc-go/pull/9367","https://github.com/grpc/grpc-go/releases/tag/v1.82.2","https://github.com/grpc/grpc-go/releases/tag/v1.83.2","https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-84445","description":"gRPC-Go is the Go language implementation of gRPC. Prior to 1.82.2 and 1.83.2, servers created with xds.NewGRPCServer() allow internal/transport/http2_server.go to accept an RPC containing neither the :authority header nor the Host header, while RouteAndProcess in internal/xds/server/routing.go assumes that an authority value exists and indexes the empty slice. A remote client that can complete transport connection establishment can trigger an index-out-of-bounds panic that is not recovered by the per-RPC goroutine and terminates the entire server process. In insecure or ordinary TLS deployments the request can be unauthenticated, while strict mTLS or ALTS deployments require valid transport credentials before the malformed RPC can reach the interceptor. This issue is fixed in versions 1.82.2 and 1.83.2."}]},{"artifact":{"id":"c23e83d2851052a5","cpes":["cpe:2.3:a:google:grpc:v1.82.1:*:*:*:*:*:*:*"],"name":"google.golang.org/grpc","purl":"pkg:golang/google.golang.org/grpc@v1.82.1","type":"go-module","version":"v1.82.1","language":"go","licenses":[],"metadata":{"h1Digest":"h1:NnAxzGRA0677vCa4BUkOAnO5+FfQqVl9iUXeD0IqcGE=","mainModule":"k6","architecture":"amd64","goCompiledVersion":"go1.26.6"},"locations":[{"path":"/usr/libexec/sm-k6/k6-v1","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/usr/libexec/sm-k6/k6-v1","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.83.1"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-vp52-pcj8-j9qc","versionConstraint":"<=1.83.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"google.golang.org/grpc","version":"v1.82.1"},"language":"go","namespace":"github:language:go"}}],"vulnerability":{"id":"GHSA-vp52-pcj8-j9qc","fix":{"state":"fixed","versions":["1.83.1"],"available":[{"date":"2026-09-02","kind":"first-observed","version":"1.83.1"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84304","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-84304","date":"2026-10-09","epss":0.00609,"percentile":0.47557}],"risk":0.49328999999999995,"urls":["https://github.com/grpc/grpc-go/security/advisories/GHSA-vp52-pcj8-j9qc","https://nvd.nist.gov/vuln/detail/CVE-2026-84304","https://github.com/grpc/grpc-go/pull/9331","https://github.com/grpc/grpc-go/pull/9333","https://github.com/grpc/grpc-go/commit/7354d9c8debb4bcf2225bf429857078de310c176","https://github.com/grpc/grpc-go/commit/8cfeca0e1ee5ea0980dcc320e20240fa1079ec77","https://github.com/grpc/grpc-go/releases/tag/v1.83.1"],"severity":"High","namespace":"github:language:go","advisories":[],"dataSource":"https://github.com/advisories/GHSA-vp52-pcj8-j9qc","description":"gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation"},"relatedVulnerabilities":[{"id":"CVE-2026-84304","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84304","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-84304","date":"2026-10-09","epss":0.00609,"percentile":0.47557}],"urls":["https://github.com/grpc/grpc-go/commit/7354d9c8debb4bcf2225bf429857078de310c176","https://github.com/grpc/grpc-go/commit/8cfeca0e1ee5ea0980dcc320e20240fa1079ec77","https://github.com/grpc/grpc-go/pull/9331","https://github.com/grpc/grpc-go/pull/9333","https://github.com/grpc/grpc-go/releases/tag/v1.83.1","https://github.com/grpc/grpc-go/security/advisories/GHSA-vp52-pcj8-j9qc"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-84304","description":"gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, internal/transport/transport.go stores each fragmented HTTP/2 DATA frame as a separate recvMsg in recvBuffer, so millions of one-byte frames can consume disproportionate heap memory even when payload bytes remain within connection and stream flow-control windows. An unauthenticated remote attacker can use concurrent multiplexed streams to exhaust process memory and cause a runtime panic or out-of-memory termination. Receive-buffer compaction is enabled by default and can be controlled temporarily with GRPC_GO_EXPERIMENTAL_ENABLE_RECEIVE_BUFFER_COMPACTION. This issue is fixed in version 1.83.1."}]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87646","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87646","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87646","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87646","date":"2026-10-09","epss":0.00525,"percentile":0.42778}],"risk":0.48824999999999996,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/539754136"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87646","description":"Use after free in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95350","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95350","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95350","cwe":"CWE-122","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95350","date":"2026-10-09","epss":0.00516,"percentile":0.42097}],"risk":0.47988,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/551573368"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95350","description":"Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"},"relatedVulnerabilities":[]},{"artifact":{"id":"5072120da1bad992","cpes":["cpe:2.3:a:DaveGamble:cjson:1.7.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cjson:cjson:1.7.19-r1:*:*:*:*:*:*:*"],"name":"cjson","purl":"pkg:apk/alpine/cjson@1.7.19-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"1.7.19-r1","language":"","licenses":["MIT"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcjson.so.1"},{"path":"/usr/lib/libcjson.so.1.7.19"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"cjson"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:davegamble:cjson:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-67216","versionConstraint":"<= 1.7.19 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:DaveGamble:cjson:1.7.19:*:*:*:*:*:*:*"],"package":{"name":"cjson","version":"1.7.19-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-67216","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-67216","cwe":"CWE-407","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-67216","date":"2026-10-09","epss":0.00645,"percentile":0.49395}],"risk":0.474075,"urls":["https://github.com/DaveGamble/cJSON/blob/v1.7.19/cJSON.c#L3057-L3180","https://joshua.hu/cjson-json-parser-cve-vulnerabilities","https://www.vulncheck.com/advisories/cjson-cjson-compare-exponential-complexity-denial-of-service"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-67216","description":"cJSON through 1.7.19 contains an inefficient algorithmic complexity flaw in cJSON_Compare(). When comparing objects, the function recurses into each shared subtree twice, once in each direction, with no depth guard, making the running time exponential in nesting depth. A small, deeply nested document of a few hundred bytes (depth around 40) compared for equality consumes hours of CPU, and the cost roughly doubles with each additional level of nesting. An application that calls cJSON_Compare() on attacker-influenced JSON that is structurally equal to a reference document is exposed to a denial-of-service condition."},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95281","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95281","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95281","cwe":"CWE-122","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95281","date":"2026-10-09","epss":0.00507,"percentile":0.41402}],"risk":0.47151,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/551708184"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95281","description":"Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95318","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95318","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95318","cwe":"CWE-122","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95318","date":"2026-10-09","epss":0.00507,"percentile":0.41402}],"risk":0.47151,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/556576976"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95318","description":"Buffer overflow in Video in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95283","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95283","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95283","cwe":"CWE-122","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95283","date":"2026-10-09","epss":0.00507,"percentile":0.41401}],"risk":0.47151,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/543141419"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95283","description":"Buffer overflow in Tint in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95284","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95284","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95284","cwe":"CWE-122","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95284","date":"2026-10-09","epss":0.00507,"percentile":0.41401}],"risk":0.47151,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/556435507"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95284","description":"Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95349","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95349","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95349","cwe":"CWE-122","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95349","date":"2026-10-09","epss":0.00507,"percentile":0.41401}],"risk":0.47151,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/553172761"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95349","description":"Buffer overflow in WebGL in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87527","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87527","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87527","cwe":"CWE-122","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87527","date":"2026-10-09","epss":0.00506,"percentile":0.41359}],"risk":0.47057999999999994,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/548130125"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87527","description":"Buffer overflow in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87547","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87547","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87547","cwe":"CWE-706","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87547","date":"2026-10-09","epss":0.00503,"percentile":0.41176}],"risk":0.46779,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/497111188"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87547","description":"Incorrect reference resolution in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87529","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87529","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87529","cwe":"CWE-197","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87529","date":"2026-10-09","epss":0.00503,"percentile":0.41175}],"risk":0.46779,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/536423794"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87529","description":"Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87579","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87579","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87579","cwe":"CWE-122","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87579","date":"2026-10-09","epss":0.00573,"percentile":0.45682}],"risk":0.466995,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/504690157"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87579","description":"Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87430","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87430","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87430","cwe":"CWE-122","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87430","date":"2026-10-09","epss":0.00573,"percentile":0.45681}],"risk":0.466995,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/542449805"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87430","description":"Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95339","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95339","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95339","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95339","date":"2026-10-09","epss":0.00496,"percentile":0.40654}],"risk":0.4612799999999999,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/548585299"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95339","description":"Use after free in ServiceWorker in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95357","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95357","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95357","cwe":"CWE-787","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95357","date":"2026-10-09","epss":0.0047,"percentile":0.38723}],"risk":0.4371,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/530045332"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95357","description":"Out of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95329","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95329","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95329","cwe":"CWE-787","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95329","date":"2026-10-09","epss":0.00462,"percentile":0.3812}],"risk":0.42965999999999993,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/559320837"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95329","description":"Out of bounds write in WebGL in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95331","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95331","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95331","cwe":"CWE-787","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95331","date":"2026-10-09","epss":0.00462,"percentile":0.3812}],"risk":0.42965999999999993,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/500127519"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95331","description":"Out of bounds write in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95356","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95356","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95356","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95356","date":"2026-10-09","epss":0.00462,"percentile":0.3812}],"risk":0.42965999999999993,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/560439699"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95356","description":"Use after free in WindowDialog in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95299","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95299","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95299","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95299","date":"2026-10-09","epss":0.00462,"percentile":0.38119}],"risk":0.42965999999999993,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/561997427"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95299","description":"Use after free in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95310","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95310","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95310","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95310","date":"2026-10-09","epss":0.00462,"percentile":0.38119}],"risk":0.42965999999999993,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/562151598"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95310","description":"Use after free in AdFilter in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95313","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95313","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95313","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95313","date":"2026-10-09","epss":0.00462,"percentile":0.38119}],"risk":0.42965999999999993,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/552665794"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95313","description":"Use after free in Fullscreen in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95325","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95325","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95325","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95325","date":"2026-10-09","epss":0.00462,"percentile":0.38119}],"risk":0.42965999999999993,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/536648933"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95325","description":"Use after free in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106211","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106211","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106211","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106211","date":"2026-10-09","epss":0.00462,"percentile":0.38118}],"risk":0.42965999999999993,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/562002095"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106211","description":"Use after free in TabStrip in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95277","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95277","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95277","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95277","date":"2026-10-09","epss":0.00462,"percentile":0.38118}],"risk":0.42965999999999993,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/553136141"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95277","description":"Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95311","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95311","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95311","cwe":"CWE-590","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95311","date":"2026-10-09","epss":0.00462,"percentile":0.38118}],"risk":0.42965999999999993,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/553123003"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95311","description":"Free of non-heap memory in Fonts in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87637","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87637","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87637","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87637","date":"2026-10-09","epss":0.00462,"percentile":0.38064}],"risk":0.42965999999999993,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/534863145"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87637","description":"Use after free in Extensions in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87607","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87607","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87607","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87607","date":"2026-10-09","epss":0.00462,"percentile":0.38063}],"risk":0.42965999999999993,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/553122131"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87607","description":"Use after free in Device in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87638","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87638","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87638","cwe":"CWE-787","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87638","date":"2026-10-09","epss":0.00462,"percentile":0.38063}],"risk":0.42965999999999993,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/540024134"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87638","description":"Out of bounds write in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87643","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87643","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87643","cwe":"CWE-190","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87643","date":"2026-10-09","epss":0.00462,"percentile":0.38063}],"risk":0.42965999999999993,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/513416699"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87643","description":"Integer overflow in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87650","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87650","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87650","cwe":"CWE-125","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87650","date":"2026-10-09","epss":0.00462,"percentile":0.38062}],"risk":0.42965999999999993,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/534912743"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87650","description":"Out of bounds read in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87470","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87470","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87470","cwe":"CWE-1284","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87470","date":"2026-10-09","epss":0.00462,"percentile":0.38058}],"risk":0.42965999999999993,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/536446354"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87470","description":"Improper quantity validation in Tint in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87438","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87438","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87438","cwe":"CWE-787","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87438","date":"2026-10-09","epss":0.00462,"percentile":0.38057}],"risk":0.42965999999999993,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/548127218"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87438","description":"Out of bounds write in WebGL in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87488","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87488","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87488","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87488","date":"2026-10-09","epss":0.00462,"percentile":0.38057}],"risk":0.42965999999999993,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/546252753"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87488","description":"Use after free in WebGL in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87448","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87448","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87448","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87448","date":"2026-10-09","epss":0.00462,"percentile":0.38056}],"risk":0.42965999999999993,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/516965176"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87448","description":"Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87455","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87455","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87455","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87455","date":"2026-10-09","epss":0.00462,"percentile":0.38056}],"risk":0.42965999999999993,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/542565481"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87455","description":"Use after free in Aura in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87558","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87558","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87558","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87558","date":"2026-10-09","epss":0.00462,"percentile":0.38056}],"risk":0.42965999999999993,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/553128689"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87558","description":"Use after free in Payments in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87474","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87474","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87474","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87474","date":"2026-10-09","epss":0.00462,"percentile":0.38055}],"risk":0.42965999999999993,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/554558968"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87474","description":"Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87520","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87520","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87520","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87520","date":"2026-10-09","epss":0.00462,"percentile":0.38055}],"risk":0.42965999999999993,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/529878021"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87520","description":"Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87581","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87581","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87581","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87581","date":"2026-10-09","epss":0.00462,"percentile":0.38055}],"risk":0.42965999999999993,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/553129531"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87581","description":"Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87500","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87500","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87500","cwe":"CWE-129","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87500","date":"2026-10-09","epss":0.00462,"percentile":0.38054}],"risk":0.42965999999999993,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/540019091"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87500","description":"Improper validation of array index in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87634","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87634","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87634","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87634","date":"2026-10-09","epss":0.00462,"percentile":0.38053}],"risk":0.42965999999999993,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/349994197"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87634","description":"Use after free in WebPackaging in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95343","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95343","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95343","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95343","date":"2026-10-09","epss":0.00523,"percentile":0.42636}],"risk":0.426245,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/559815527"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95343","description":"Use after free in WebAudio in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87613","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87613","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":9,"impactScore":6.1,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87613","cwe":"CWE-706","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87613","date":"2026-10-09","epss":0.0047,"percentile":0.38772}],"risk":0.42300000000000004,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/501889544"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87613","description":"Incorrect reference resolution in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106197","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106197","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106197","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106197","date":"2026-10-09","epss":0.00454,"percentile":0.37488}],"risk":0.42222,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/560238696"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106197","description":"Use after free in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-93372","versionConstraint":"< 153.0.8010.52 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-93372","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-93372","cwe":"CWE-121","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-93372","date":"2026-10-09","epss":0.00448,"percentile":0.36993}],"risk":0.4166399999999999,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0194356994.html","https://issues.chromium.org/issues/548085797"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-93372","description":"Buffer overflow in WebGL in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87492","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87492","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87492","cwe":"CWE-863","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87492","date":"2026-10-09","epss":0.00444,"percentile":0.36682}],"risk":0.41292000000000006,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/529123409"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87492","description":"Incorrect authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"9e813491f50ba632","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64835","versionConstraint":">= 4.4, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64835","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64835","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64835","date":"2026-10-09","epss":0.00496,"percentile":0.40645}],"risk":0.40299999999999997,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64835","description":"FFmpeg versions 4.4 through 8.1.2 contain an out-of-bounds memory access vulnerability in the ADX audio decoder within libavcodec/adxdec.c that allows attackers to trigger both out-of-bounds reads and writes by supplying a crafted ADX or AAX audio file with a mid-stream channel layout change. When AV_PKT_DATA_NEW_EXTRADATA side data is received mid-stream, the adx_decode_frame function re-parses the stream header but fails to update the internal channel state, causing subsequent decoding operations to access the prev[] state array using a stale channel count."},"relatedVulnerabilities":[]},{"artifact":{"id":"d07d7332fd90e2f5","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64835","versionConstraint":">= 4.4, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64835","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64835","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64835","date":"2026-10-09","epss":0.00496,"percentile":0.40645}],"risk":0.40299999999999997,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64835","description":"FFmpeg versions 4.4 through 8.1.2 contain an out-of-bounds memory access vulnerability in the ADX audio decoder within libavcodec/adxdec.c that allows attackers to trigger both out-of-bounds reads and writes by supplying a crafted ADX or AAX audio file with a mid-stream channel layout change. When AV_PKT_DATA_NEW_EXTRADATA side data is received mid-stream, the adx_decode_frame function re-parses the stream header but fails to update the internal channel state, causing subsequent decoding operations to access the prev[] state array using a stale channel count."},"relatedVulnerabilities":[]},{"artifact":{"id":"50075ec0b9beb4e7","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64835","versionConstraint":">= 4.4, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64835","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64835","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64835","date":"2026-10-09","epss":0.00496,"percentile":0.40645}],"risk":0.40299999999999997,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64835","description":"FFmpeg versions 4.4 through 8.1.2 contain an out-of-bounds memory access vulnerability in the ADX audio decoder within libavcodec/adxdec.c that allows attackers to trigger both out-of-bounds reads and writes by supplying a crafted ADX or AAX audio file with a mid-stream channel layout change. When AV_PKT_DATA_NEW_EXTRADATA side data is received mid-stream, the adx_decode_frame function re-parses the stream header but fails to update the internal channel state, causing subsequent decoding operations to access the prev[] state array using a stale channel count."},"relatedVulnerabilities":[]},{"artifact":{"id":"15f575ddc365a154","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64835","versionConstraint":">= 4.4, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64835","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64835","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64835","date":"2026-10-09","epss":0.00496,"percentile":0.40645}],"risk":0.40299999999999997,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64835","description":"FFmpeg versions 4.4 through 8.1.2 contain an out-of-bounds memory access vulnerability in the ADX audio decoder within libavcodec/adxdec.c that allows attackers to trigger both out-of-bounds reads and writes by supplying a crafted ADX or AAX audio file with a mid-stream channel layout change. When AV_PKT_DATA_NEW_EXTRADATA side data is received mid-stream, the adx_decode_frame function re-parses the stream header but fails to update the internal channel state, causing subsequent decoding operations to access the prev[] state array using a stale channel count."},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-102331","versionConstraint":"< 154.0.8037.92 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-102331","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102331","cwe":"CWE-122","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-102331","date":"2026-10-09","epss":0.0043,"percentile":0.35285}],"risk":0.3999,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01807488085.html","https://issues.chromium.org/issues/551673541"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102331","description":"Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95347","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95347","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95347","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95347","date":"2026-10-09","epss":0.00426,"percentile":0.34944}],"risk":0.39618,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/550181232"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95347","description":"Use after free in Updater in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87504","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87504","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87504","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87504","date":"2026-10-09","epss":0.00426,"percentile":0.34904}],"risk":0.39618,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/499206649"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87504","description":"Use after free in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87526","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87526","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87526","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87526","date":"2026-10-09","epss":0.00426,"percentile":0.34904}],"risk":0.39618,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/544484669"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87526","description":"Use after free in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via UI Interaction. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87609","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87609","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87609","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87609","date":"2026-10-09","epss":0.00426,"percentile":0.34904}],"risk":0.39618,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/547322272"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87609","description":"Use after free in Sharing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"9e813491f50ba632","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66036","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66036","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66036","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66036","date":"2026-10-09","epss":0.00496,"percentile":0.40645}],"risk":0.3951466666666666,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66036","description":"FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability in the vf_hqdn3d filter that allows attackers to corrupt heap memory by supplying a crafted video whose frame resolution increases between frames when filtergraph reinitialization is disabled via the -reinit_filter 0 option. Attackers can provide a malicious video input where vf_hqdn3d.config_input() allocates undersized per-plane line-history buffers based on the initial frame width, and subsequent larger frames cause denoise_spatial() to write beyond the allocation boundary, resulting in heap memory corruption."},"relatedVulnerabilities":[]},{"artifact":{"id":"d07d7332fd90e2f5","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66036","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66036","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66036","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66036","date":"2026-10-09","epss":0.00496,"percentile":0.40645}],"risk":0.3951466666666666,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66036","description":"FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability in the vf_hqdn3d filter that allows attackers to corrupt heap memory by supplying a crafted video whose frame resolution increases between frames when filtergraph reinitialization is disabled via the -reinit_filter 0 option. Attackers can provide a malicious video input where vf_hqdn3d.config_input() allocates undersized per-plane line-history buffers based on the initial frame width, and subsequent larger frames cause denoise_spatial() to write beyond the allocation boundary, resulting in heap memory corruption."},"relatedVulnerabilities":[]},{"artifact":{"id":"50075ec0b9beb4e7","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66036","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66036","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66036","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66036","date":"2026-10-09","epss":0.00496,"percentile":0.40645}],"risk":0.3951466666666666,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66036","description":"FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability in the vf_hqdn3d filter that allows attackers to corrupt heap memory by supplying a crafted video whose frame resolution increases between frames when filtergraph reinitialization is disabled via the -reinit_filter 0 option. Attackers can provide a malicious video input where vf_hqdn3d.config_input() allocates undersized per-plane line-history buffers based on the initial frame width, and subsequent larger frames cause denoise_spatial() to write beyond the allocation boundary, resulting in heap memory corruption."},"relatedVulnerabilities":[]},{"artifact":{"id":"15f575ddc365a154","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66036","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66036","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66036","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66036","date":"2026-10-09","epss":0.00496,"percentile":0.40645}],"risk":0.3951466666666666,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66036","description":"FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability in the vf_hqdn3d filter that allows attackers to corrupt heap memory by supplying a crafted video whose frame resolution increases between frames when filtergraph reinitialization is disabled via the -reinit_filter 0 option. Attackers can provide a malicious video input where vf_hqdn3d.config_input() allocates undersized per-plane line-history buffers based on the initial frame width, and subsequent larger frames cause denoise_spatial() to write beyond the allocation boundary, resulting in heap memory corruption."},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87595","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87595","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87595","cwe":"CWE-918","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87595","date":"2026-10-09","epss":0.00419,"percentile":0.34249}],"risk":0.39386000000000004,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/513726466"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87595","description":"Server-side request forgery in Mobile in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106227","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106227","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106227","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106227","date":"2026-10-09","epss":0.00423,"percentile":0.34689}],"risk":0.39338999999999996,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/561891645"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106227","description":"Use after free in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106239","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106239","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106239","cwe":"CWE-190","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106239","date":"2026-10-09","epss":0.00423,"percentile":0.34689}],"risk":0.39338999999999996,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/546630009"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106239","description":"Integer overflow in WebGL in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-93374","versionConstraint":"< 153.0.8010.52 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-93374","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-93374","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-93374","date":"2026-10-09","epss":0.00414,"percentile":0.33645}],"risk":0.3850199999999999,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0194356994.html","https://issues.chromium.org/issues/500417361"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-93374","description":"Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-102322","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-102322","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102322","cwe":"CWE-863","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-102322","date":"2026-10-09","epss":0.00409,"percentile":0.33139}],"risk":0.38037,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/527023137"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102322","description":"Incorrect Authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"9e813491f50ba632","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66041","versionConstraint":">= 7.0, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66041","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66041","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66041","date":"2026-10-09","epss":0.00487,"percentile":0.40061}],"risk":0.37986000000000003,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66041","description":"FFmpeg 7.0 through 8.1.2, fixed in commit 4da9812, contains a heap out-of-bounds write vulnerability in the vf_quirc filter that allows an attacker to corrupt heap memory by supplying a crafted PGS/SUP subtitle file with mismatched frame dimensions. Attackers can provide a subtitle file whose second presentation has larger dimensions than its first, causing av_image_copy_plane() to copy data exceeding the initial allocation size into the undersized libquirc grayscale image buffer, resulting in heap corruption and process crash with potential for code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"d07d7332fd90e2f5","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66041","versionConstraint":">= 7.0, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66041","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66041","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66041","date":"2026-10-09","epss":0.00487,"percentile":0.40061}],"risk":0.37986000000000003,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66041","description":"FFmpeg 7.0 through 8.1.2, fixed in commit 4da9812, contains a heap out-of-bounds write vulnerability in the vf_quirc filter that allows an attacker to corrupt heap memory by supplying a crafted PGS/SUP subtitle file with mismatched frame dimensions. Attackers can provide a subtitle file whose second presentation has larger dimensions than its first, causing av_image_copy_plane() to copy data exceeding the initial allocation size into the undersized libquirc grayscale image buffer, resulting in heap corruption and process crash with potential for code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"50075ec0b9beb4e7","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66041","versionConstraint":">= 7.0, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66041","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66041","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66041","date":"2026-10-09","epss":0.00487,"percentile":0.40061}],"risk":0.37986000000000003,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66041","description":"FFmpeg 7.0 through 8.1.2, fixed in commit 4da9812, contains a heap out-of-bounds write vulnerability in the vf_quirc filter that allows an attacker to corrupt heap memory by supplying a crafted PGS/SUP subtitle file with mismatched frame dimensions. Attackers can provide a subtitle file whose second presentation has larger dimensions than its first, causing av_image_copy_plane() to copy data exceeding the initial allocation size into the undersized libquirc grayscale image buffer, resulting in heap corruption and process crash with potential for code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"15f575ddc365a154","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66041","versionConstraint":">= 7.0, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66041","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66041","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66041","date":"2026-10-09","epss":0.00487,"percentile":0.40061}],"risk":0.37986000000000003,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66041","description":"FFmpeg 7.0 through 8.1.2, fixed in commit 4da9812, contains a heap out-of-bounds write vulnerability in the vf_quirc filter that allows an attacker to corrupt heap memory by supplying a crafted PGS/SUP subtitle file with mismatched frame dimensions. Attackers can provide a subtitle file whose second presentation has larger dimensions than its first, causing av_image_copy_plane() to copy data exceeding the initial allocation size into the undersized libquirc grayscale image buffer, resulting in heap corruption and process crash with potential for code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-91728","versionConstraint":"< 153.0.8010.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-91728","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91728","cwe":"CWE-190","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-91728","date":"2026-10-09","epss":0.00407,"percentile":0.32942}],"risk":0.37850999999999996,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0541751186.html","https://issues.chromium.org/issues/556715288"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91728","description":"Integer overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"392763b3b6bd02bf","cpes":["cpe:2.3:a:golang:crypto:v0.54.0:*:*:*:*:go:*:*","cpe:2.3:a:go:ssh:v0.54.0:*:*:*:*:go:*:*"],"name":"golang.org/x/crypto","purl":"pkg:golang/golang.org/x/crypto@v0.54.0","type":"go-module","version":"v0.54.0","language":"go","licenses":[],"metadata":{"h1Digest":"h1:YLIA59K4fiNzHzjnZt2tUJQjQtUWfWbeHBqKtk3eScw=","mainModule":"k6","architecture":"amd64","goCompiledVersion":"go1.26.6"},"locations":[{"path":"/usr/libexec/sm-k6/k6-v1","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/usr/libexec/sm-k6/k6-v1","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.56.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6355","versionConstraint":"<0.56.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/crypto","version":"v0.54.0"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6355","fix":{"state":"fixed","versions":["0.56.0"],"available":[{"date":"2026-09-02","kind":"release","version":"0.56.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56855","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-56855","date":"2026-10-09","epss":0.005,"percentile":0.40964}],"risk":0.375,"urls":["https://go.dev/cl/826524","https://groups.google.com/g/golang-announce/c/1y3fb2np35U"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/issue/81317","description":"Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection.\n\nNow, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking."},"relatedVulnerabilities":[{"id":"CVE-2026-56855","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56855","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-56855","date":"2026-10-09","epss":0.005,"percentile":0.40964}],"urls":["https://go.dev/cl/826524","https://go.dev/issue/81317","https://groups.google.com/g/golang-announce/c/1y3fb2np35U","https://pkg.go.dev/vuln/GO-2026-6355"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56855","description":"Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking."}]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-103631","versionConstraint":"< 154.0.8037.97 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-103631","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-103631","cwe":"CWE-122","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-103631","date":"2026-10-09","epss":0.0046,"percentile":0.37887}],"risk":0.3749,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/567088927"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-103631","description":"Buffer overflow in WebRTC in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106375","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106375","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106375","cwe":"CWE-459","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106375","date":"2026-10-09","epss":0.00402,"percentile":0.32392}],"risk":0.37385999999999997,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/536507840"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106375","description":"Incomplete cleanup in Dawn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95276","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95276","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95276","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95276","date":"2026-10-09","epss":0.00467,"percentile":0.38495}],"risk":0.36893,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/517730821"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95276","description":"Improper input validation in Themes in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code inside the sandbox via crafted network traffic. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106382","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106382","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106382","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106382","date":"2026-10-09","epss":0.00396,"percentile":0.3173}],"risk":0.36827999999999994,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/534994449"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106382","description":"Use after free in Chromecast in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95306","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95306","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95306","cwe":"CWE-843","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95306","date":"2026-10-09","epss":0.00451,"percentile":0.37255}],"risk":0.36756500000000003,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/560536735"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95306","description":"Type confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95286","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95286","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95286","cwe":"CWE-843","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95286","date":"2026-10-09","epss":0.00451,"percentile":0.37254}],"risk":0.36756500000000003,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/557523002"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95286","description":"Type confusion in Bindings in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95365","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95365","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95365","cwe":"CWE-843","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95365","date":"2026-10-09","epss":0.00451,"percentile":0.37254}],"risk":0.36756500000000003,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/558764482"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95365","description":"Type confusion in IndexedDB in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95380","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95380","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95380","cwe":"CWE-843","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95380","date":"2026-10-09","epss":0.00451,"percentile":0.37254}],"risk":0.36756500000000003,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/534579660"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95380","description":"Type confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87636","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87636","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87636","cwe":"CWE-843","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87636","date":"2026-10-09","epss":0.00451,"percentile":0.37215}],"risk":0.36756500000000003,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/495541478"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87636","description":"Type confusion in XML in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87612","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87612","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87612","cwe":"CWE-843","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87612","date":"2026-10-09","epss":0.00451,"percentile":0.37211}],"risk":0.36756500000000003,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/554236352"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87612","description":"Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-91731","versionConstraint":"< 153.0.8010.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-91731","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91731","cwe":"CWE-843","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-91731","date":"2026-10-09","epss":0.00444,"percentile":0.36648}],"risk":0.36186000000000007,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0541751186.html","https://issues.chromium.org/issues/523554372"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91731","description":"Type confusion in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-91741","versionConstraint":"< 153.0.8010.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-91741","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91741","cwe":"CWE-843","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-91741","date":"2026-10-09","epss":0.00444,"percentile":0.36648}],"risk":0.36186000000000007,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0541751186.html","https://issues.chromium.org/issues/546413288"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91741","description":"Type confusion in CacheStorage in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106240","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106240","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106240","cwe":"CWE-843","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106240","date":"2026-10-09","epss":0.00444,"percentile":0.36602}],"risk":0.36186000000000007,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/567177599"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106240","description":"Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-93377","versionConstraint":"< 153.0.8010.52 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-93377","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-93377","cwe":"CWE-843","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-93377","date":"2026-10-09","epss":0.00436,"percentile":0.35984}],"risk":0.35534000000000004,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0194356994.html","https://issues.chromium.org/issues/560121552"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-93377","description":"Type confusion in V8 in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-91749","versionConstraint":"< 153.0.8010.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-91749","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91749","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-91749","date":"2026-10-09","epss":0.00377,"percentile":0.29605}],"risk":0.35061,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0541751186.html","https://issues.chromium.org/issues/558456602"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91749","description":"Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"},"relatedVulnerabilities":[]},{"artifact":{"id":"9e813491f50ba632","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66039","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66039","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66039","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-66039","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66039","date":"2026-10-09","epss":0.0044,"percentile":0.36247}],"risk":0.35053333333333336,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631","https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66039","description":"FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability in the MACE6 audio decoder that allows attackers to corrupt heap memory by supplying a crafted CAF file with a malicious bytes_per_packet value. Attackers can craft a CAF file with oversized bytes_per_packet and frames_per_packet values in the desc chunk to trigger an integer overflow in mace_decode_frame() during output sample count computation, resulting in an undersized buffer allocation and heap out-of-bounds write that could enable code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"d07d7332fd90e2f5","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66039","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66039","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66039","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-66039","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66039","date":"2026-10-09","epss":0.0044,"percentile":0.36247}],"risk":0.35053333333333336,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631","https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66039","description":"FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability in the MACE6 audio decoder that allows attackers to corrupt heap memory by supplying a crafted CAF file with a malicious bytes_per_packet value. Attackers can craft a CAF file with oversized bytes_per_packet and frames_per_packet values in the desc chunk to trigger an integer overflow in mace_decode_frame() during output sample count computation, resulting in an undersized buffer allocation and heap out-of-bounds write that could enable code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"50075ec0b9beb4e7","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66039","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66039","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66039","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-66039","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66039","date":"2026-10-09","epss":0.0044,"percentile":0.36247}],"risk":0.35053333333333336,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631","https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66039","description":"FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability in the MACE6 audio decoder that allows attackers to corrupt heap memory by supplying a crafted CAF file with a malicious bytes_per_packet value. Attackers can craft a CAF file with oversized bytes_per_packet and frames_per_packet values in the desc chunk to trigger an integer overflow in mace_decode_frame() during output sample count computation, resulting in an undersized buffer allocation and heap out-of-bounds write that could enable code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"15f575ddc365a154","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66039","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66039","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66039","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-66039","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66039","date":"2026-10-09","epss":0.0044,"percentile":0.36247}],"risk":0.35053333333333336,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631","https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66039","description":"FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability in the MACE6 audio decoder that allows attackers to corrupt heap memory by supplying a crafted CAF file with a malicious bytes_per_packet value. Attackers can craft a CAF file with oversized bytes_per_packet and frames_per_packet values in the desc chunk to trigger an integer overflow in mace_decode_frame() during output sample count computation, resulting in an undersized buffer allocation and heap out-of-bounds write that could enable code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95334","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95334","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95334","cwe":"CWE-706","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95334","date":"2026-10-09","epss":0.00441,"percentile":0.36392}],"risk":0.34839,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/513403696"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95334","description":"Incorrect reference resolution in WebProtect in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-102306","versionConstraint":"< 154.0.8037.92 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-102306","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102306","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-102306","date":"2026-10-09","epss":0.00373,"percentile":0.29155}],"risk":0.34689,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01807488085.html","https://issues.chromium.org/issues/556926296"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102306","description":"Use after free in Bluetooth in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c1fed726b9e0ccb7","cpes":["cpe:2.3:a:libcrypto3:libcrypto3:3.5.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto3:libcrypto:3.5.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto3:3.5.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto:3.5.8-r0:*:*:*:*:*:*:*"],"name":"libcrypto3","purl":"pkg:apk/alpine/libcrypto3@3.5.8-r0?arch=x86_64&distro=alpine-3.24.2&upstream=openssl","type":"apk","version":"3.5.8-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/ssl"},{"path":"/etc/ssl/ct_log_list.cnf"},{"path":"/etc/ssl/ct_log_list.cnf.dist"},{"path":"/etc/ssl/openssl.cnf"},{"path":"/etc/ssl/openssl.cnf.dist"},{"path":"/etc/ssl/certs"},{"path":"/etc/ssl/private"},{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcrypto.so.3"},{"path":"/usr/lib/engines-3"},{"path":"/usr/lib/engines-3/afalg.so"},{"path":"/usr/lib/engines-3/capi.so"},{"path":"/usr/lib/engines-3/loader_attic.so"},{"path":"/usr/lib/engines-3/padlock.so"},{"path":"/usr/lib/ossl-modules"},{"path":"/usr/lib/ossl-modules/legacy.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-54873","versionConstraint":">= 3.4.0, < 3.4.8||>= 3.5.0, < 3.5.9||>= 3.6.0, < 3.6.5||>= 4.0.0, < 4.0.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.5.8:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.5.8-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-54873","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54873","cwe":"CWE-770","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-54873","date":"2026-10-09","epss":0.00462,"percentile":0.38145}],"risk":0.34650000000000003,"urls":["https://github.com/openssl/openssl/commit/1f643b8bc735487b500a1f68a7fb3a22d5e38e23","https://github.com/openssl/openssl/commit/279e7ee1392af98785746788168749491c74bd53","https://github.com/openssl/openssl/commit/3ea6213e050e938ecbbf8c4eff32bec2736780eb","https://github.com/openssl/openssl/commit/7127fb10888b49711c63128a09e524c0d2d5d0b2","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-54873","description":"Issue summary: QUIC process may keep memory for QUIC packet\nbuffer for much longer period than necessary.\n\nImpact summary: Remote peer can exploit this vulnerability\nby sending maliciously crafted packets, making the local\nQUIC stack to keep the memory for packet buffers allocated.\nThe time for which the memory remains allocated is entirely\nunder the control of the potentially malicious remote peer.\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: To save copy operation from the packet buffer to the\nstream reassemble buffer the QUIC stack leaves the stream data\non the packet buffer waiting to be copied to a buffer provided\nby the local receiving application. The QUIC stack releases\na reference to the packet buffer only after the data are copied\nto the application buffer. This design is more efficient for\nlegitimate data transfers but enables an attacker to allocate a lot\nmore memory than actually required by the data kept in the receiving\nstream buffer.\n\nTo mitigate the vulnerability, the QUIC stack now calculates\nand monitors memory overhead for every stream. The memory overhead\nfor a single stream frame is calculated as a difference between the\nsize of the whole packet that carries the stream frame and the size\nof the stream frame itself. The memory overhead for a single stream\nframe is added to the total (cumulative) memory overhead QUIC stack\nkeeps for each stream. Once the cumulative memory overhead exceeds\n64kB, the QUIC stack moves the stream frame data from the packet\nbuffer to the stream buffer, starting with the next packet received.\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary."},"relatedVulnerabilities":[]},{"artifact":{"id":"269544be9368a131","cpes":["cpe:2.3:a:libssl3:libssl3:3.5.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl3:libssl:3.5.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl3:3.5.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl:3.5.8-r0:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:apk/alpine/libssl3@3.5.8-r0?arch=x86_64&distro=alpine-3.24.2&upstream=openssl","type":"apk","version":"3.5.8-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libssl.so.3"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-54873","versionConstraint":">= 3.4.0, < 3.4.8||>= 3.5.0, < 3.5.9||>= 3.6.0, < 3.6.5||>= 4.0.0, < 4.0.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.5.8:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.5.8-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-54873","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54873","cwe":"CWE-770","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-54873","date":"2026-10-09","epss":0.00462,"percentile":0.38145}],"risk":0.34650000000000003,"urls":["https://github.com/openssl/openssl/commit/1f643b8bc735487b500a1f68a7fb3a22d5e38e23","https://github.com/openssl/openssl/commit/279e7ee1392af98785746788168749491c74bd53","https://github.com/openssl/openssl/commit/3ea6213e050e938ecbbf8c4eff32bec2736780eb","https://github.com/openssl/openssl/commit/7127fb10888b49711c63128a09e524c0d2d5d0b2","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-54873","description":"Issue summary: QUIC process may keep memory for QUIC packet\nbuffer for much longer period than necessary.\n\nImpact summary: Remote peer can exploit this vulnerability\nby sending maliciously crafted packets, making the local\nQUIC stack to keep the memory for packet buffers allocated.\nThe time for which the memory remains allocated is entirely\nunder the control of the potentially malicious remote peer.\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: To save copy operation from the packet buffer to the\nstream reassemble buffer the QUIC stack leaves the stream data\non the packet buffer waiting to be copied to a buffer provided\nby the local receiving application. The QUIC stack releases\na reference to the packet buffer only after the data are copied\nto the application buffer. This design is more efficient for\nlegitimate data transfers but enables an attacker to allocate a lot\nmore memory than actually required by the data kept in the receiving\nstream buffer.\n\nTo mitigate the vulnerability, the QUIC stack now calculates\nand monitors memory overhead for every stream. The memory overhead\nfor a single stream frame is calculated as a difference between the\nsize of the whole packet that carries the stream frame and the size\nof the stream frame itself. The memory overhead for a single stream\nframe is added to the total (cumulative) memory overhead QUIC stack\nkeeps for each stream. Once the cumulative memory overhead exceeds\n64kB, the QUIC stack moves the stream frame data from the packet\nbuffer to the stream buffer, starting with the next packet received.\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary."},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-103628","versionConstraint":"< 154.0.8037.97 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-103628","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-103628","cwe":"CWE-787","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-103628","date":"2026-10-09","epss":0.0037,"percentile":0.28907}],"risk":0.3441,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/549995090"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-103628","description":"Out of bounds write in WebGL in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95345","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95345","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95345","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95345","date":"2026-10-09","epss":0.00419,"percentile":0.34211}],"risk":0.34148500000000004,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/516404074"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95345","description":"Use after free in Actor in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95282","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95282","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95282","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95282","date":"2026-10-09","epss":0.00419,"percentile":0.3421}],"risk":0.34148500000000004,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/553129513"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95282","description":"Use after free in Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95381","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95381","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95381","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95381","date":"2026-10-09","epss":0.00432,"percentile":0.35564}],"risk":0.34128000000000003,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/497603247"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95381","description":"Improper input validation in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87553","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87553","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87553","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87553","date":"2026-10-09","epss":0.00432,"percentile":0.35438}],"risk":0.34128000000000003,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/496595299"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87553","description":"Improper input validation in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87510","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87510","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87510","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87510","date":"2026-10-09","epss":0.00432,"percentile":0.35437}],"risk":0.34128000000000003,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/532957878"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87510","description":"Improper input validation in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95353","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95353","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95353","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95353","date":"2026-10-09","epss":0.00414,"percentile":0.33671}],"risk":0.33741,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/522061704"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95353","description":"Use after free in Bindings in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95304","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95304","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95304","cwe":"CWE-787","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95304","date":"2026-10-09","epss":0.00414,"percentile":0.3367}],"risk":0.33741,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/560536731"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95304","description":"Out of bounds write in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95369","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95369","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95369","cwe":"CWE-841","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95369","date":"2026-10-09","epss":0.00414,"percentile":0.3367}],"risk":0.33741,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/513049042"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95369","description":"Inappropriate implementation in XML in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"3bfc5b995b5339c1","cpes":["cpe:2.3:a:pixman:pixman:0.46.4-r0:*:*:*:*:*:*:*"],"name":"pixman","purl":"pkg:apk/alpine/pixman@0.46.4-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"0.46.4-r0","language":"","licenses":["MIT"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpixman-1.so.0"},{"path":"/usr/lib/libpixman-1.so.0.46.4"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"pixman"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:pixman:pixman:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2023-37769","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:pixman:pixman:0.46.4:*:*:*:*:*:*:*"],"package":{"name":"pixman","version":"0.46.4-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2023-37769","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-37769","cwe":"CWE-369","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-37769","date":"2026-10-09","epss":0.00586,"percentile":0.46391}],"risk":0.33694999999999997,"urls":["https://gitlab.freedesktop.org/pixman/pixman/-/issues/76"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-37769","description":"stress-test master commit e4c878 was discovered to contain a FPE vulnerability via the component combine_inner at /pixman-combine-float.c."},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87460","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87460","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87460","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87460","date":"2026-10-09","epss":0.00413,"percentile":0.3361}],"risk":0.33659500000000003,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/540058837"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87460","description":"Use after free in Platform in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87536","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87536","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87536","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87536","date":"2026-10-09","epss":0.00413,"percentile":0.3361}],"risk":0.33659500000000003,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/554421904"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87536","description":"Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87617","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87617","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87617","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87617","date":"2026-10-09","epss":0.00413,"percentile":0.33606}],"risk":0.33659500000000003,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/523442920"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87617","description":"Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87444","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87444","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87444","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87444","date":"2026-10-09","epss":0.00413,"percentile":0.33597}],"risk":0.33659500000000003,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/489489002"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87444","description":"Memory corruption in Codecs in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87542","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87542","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87542","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87542","date":"2026-10-09","epss":0.00413,"percentile":0.33592}],"risk":0.33659500000000003,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/542756749"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87542","description":"Use after free in Input in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87587","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87587","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87587","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87587","date":"2026-10-09","epss":0.00413,"percentile":0.33592}],"risk":0.33659500000000003,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/550360762"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87587","description":"Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87588","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87588","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87588","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87588","date":"2026-10-09","epss":0.00413,"percentile":0.33591}],"risk":0.33659500000000003,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/495515356"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87588","description":"Use after free in Chromecast in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87440","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87440","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87440","cwe":"CWE-125","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87440","date":"2026-10-09","epss":0.00413,"percentile":0.3359}],"risk":0.33659500000000003,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/513458719"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87440","description":"Out of bounds read in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87572","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87572","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87572","cwe":"CWE-74","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87572","date":"2026-10-09","epss":0.00422,"percentile":0.3452}],"risk":0.33338,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/540021969"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87572","description":"Injection in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-102299","versionConstraint":"< 154.0.8037.92 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-102299","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102299","cwe":"CWE-843","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-102299","date":"2026-10-09","epss":0.00407,"percentile":0.32909}],"risk":0.331705,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01807488085.html","https://issues.chromium.org/issues/556908674"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102299","description":"Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-102323","versionConstraint":"< 154.0.8037.92 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-102323","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102323","cwe":"CWE-843","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-102323","date":"2026-10-09","epss":0.00407,"percentile":0.32909}],"risk":0.331705,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01807488085.html","https://issues.chromium.org/issues/559266114"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102323","description":"Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-91709","versionConstraint":"< 153.0.8010.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-91709","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91709","cwe":"CWE-843","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-91709","date":"2026-10-09","epss":0.00407,"percentile":0.32909}],"risk":0.331705,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0541751186.html","https://issues.chromium.org/issues/547815507"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91709","description":"Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106329","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106329","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106329","cwe":"CWE-863","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106329","date":"2026-10-09","epss":0.00355,"percentile":0.27246}],"risk":0.33015,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/562043997"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106329","description":"Incorrect authorization in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106372","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106372","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106372","cwe":"CWE-863","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106372","date":"2026-10-09","epss":0.00355,"percentile":0.27246}],"risk":0.33015,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/557288890"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106372","description":"Incorrect authorization in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95333","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95333","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95333","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95333","date":"2026-10-09","epss":0.00422,"percentile":0.34531}],"risk":0.32916,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/559682346"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95333","description":"Use after free in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"392763b3b6bd02bf","cpes":["cpe:2.3:a:golang:crypto:v0.54.0:*:*:*:*:go:*:*","cpe:2.3:a:go:ssh:v0.54.0:*:*:*:*:go:*:*"],"name":"golang.org/x/crypto","purl":"pkg:golang/golang.org/x/crypto@v0.54.0","type":"go-module","version":"v0.54.0","language":"go","licenses":[],"metadata":{"h1Digest":"h1:YLIA59K4fiNzHzjnZt2tUJQjQtUWfWbeHBqKtk3eScw=","mainModule":"k6","architecture":"amd64","goCompiledVersion":"go1.26.6"},"locations":[{"path":"/usr/libexec/sm-k6/k6-v1","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/usr/libexec/sm-k6/k6-v1","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.55.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6303","versionConstraint":"<0.55.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/crypto","version":"v0.54.0"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6303","fix":{"state":"fixed","versions":["0.55.0"],"available":[{"date":"2026-08-11","kind":"release","version":"0.55.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56854","cwe":"CWE-863","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-56854","date":"2026-10-09","epss":0.00437,"percentile":0.36064}],"risk":0.32775,"urls":["https://go.dev/cl/797040"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/issue/80213","description":"The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. Permissions returned by the PasswordCallback, KeyboardInteractiveCallback, NoClientAuthCallback, and GSSAPIWithMICConfig.AllowLogin callbacks were not validated against the client's remote address, so a source-address restriction set by those callbacks was silently ignored. The check is now applied to the Permissions returned by any authentication callback."},"relatedVulnerabilities":[{"id":"CVE-2026-56854","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56854","cwe":"CWE-863","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-56854","date":"2026-10-09","epss":0.00437,"percentile":0.36064}],"urls":["https://go.dev/cl/797040","https://go.dev/issue/80213","https://pkg.go.dev/vuln/GO-2026-6303"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56854","description":"The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. Permissions returned by the PasswordCallback, KeyboardInteractiveCallback, NoClientAuthCallback, and GSSAPIWithMICConfig.AllowLogin callbacks were not validated against the client's remote address, so a source-address restriction set by those callbacks was silently ignored. The check is now applied to the Permissions returned by any authentication callback."}]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87481","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87481","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87481","cwe":"CWE-863","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87481","date":"2026-10-09","epss":0.00412,"percentile":0.33381}],"risk":0.32548000000000005,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/498730641"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87481","description":"Incorrect authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"392763b3b6bd02bf","cpes":["cpe:2.3:a:golang:crypto:v0.54.0:*:*:*:*:go:*:*","cpe:2.3:a:go:ssh:v0.54.0:*:*:*:*:go:*:*"],"name":"golang.org/x/crypto","purl":"pkg:golang/golang.org/x/crypto@v0.54.0","type":"go-module","version":"v0.54.0","language":"go","licenses":[],"metadata":{"h1Digest":"h1:YLIA59K4fiNzHzjnZt2tUJQjQtUWfWbeHBqKtk3eScw=","mainModule":"k6","architecture":"amd64","goCompiledVersion":"go1.26.6"},"locations":[{"path":"/usr/libexec/sm-k6/k6-v1","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/usr/libexec/sm-k6/k6-v1","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.56.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6354","versionConstraint":"<0.56.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/crypto","version":"v0.54.0"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6354","fix":{"state":"fixed","versions":["0.56.0"],"available":[{"date":"2026-09-02","kind":"release","version":"0.56.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78662","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78662","date":"2026-10-09","epss":0.00431,"percentile":0.35397}],"risk":0.32325,"urls":["https://go.dev/cl/826504","https://groups.google.com/g/golang-announce/c/1y3fb2np35U"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/issue/81316","description":"Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection.\n\nNow, we add an atomic established state, set when a channel becomes usable. Until such a time, handlePacket drops every packet other than the open confirmation/failure, without blocking and without tearing down the connection."},"relatedVulnerabilities":[{"id":"CVE-2026-78662","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78662","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78662","date":"2026-10-09","epss":0.00431,"percentile":0.35397}],"urls":["https://go.dev/cl/826504","https://go.dev/issue/81316","https://groups.google.com/g/golang-announce/c/1y3fb2np35U","https://pkg.go.dev/vuln/GO-2026-6354"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78662","description":"Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time, handlePacket drops every packet other than the open confirmation/failure, without blocking and without tearing down the connection."}]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95322","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95322","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95322","cwe":"CWE-787","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95322","date":"2026-10-09","epss":0.00405,"percentile":0.32679}],"risk":0.31995,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/556576992"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95322","description":"Out of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95348","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95348","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95348","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95348","date":"2026-10-09","epss":0.00405,"percentile":0.32679}],"risk":0.31995,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/554558320"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95348","description":"Use after free in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95351","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95351","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95351","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95351","date":"2026-10-09","epss":0.00405,"percentile":0.32679}],"risk":0.31995,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/562242429"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95351","description":"Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95274","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95274","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95274","cwe":"CWE-116","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95274","date":"2026-10-09","epss":0.00405,"percentile":0.32678}],"risk":0.31995,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/553116160"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95274","description":"Improper output encoding in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95319","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95319","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95319","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95319","date":"2026-10-09","epss":0.00405,"percentile":0.32678}],"risk":0.31995,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/523765972"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95319","description":"Use after free in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95335","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95335","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95335","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95335","date":"2026-10-09","epss":0.00405,"percentile":0.32678}],"risk":0.31995,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/555299641"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95335","description":"Use after free in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95372","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95372","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95372","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95372","date":"2026-10-09","epss":0.00405,"percentile":0.32678}],"risk":0.31995,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/534997484"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95372","description":"Use after free in Chromecast in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-93373","versionConstraint":"< 153.0.8010.52 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-93373","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-93373","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-93373","date":"2026-10-09","epss":0.00344,"percentile":0.2589}],"risk":0.31992,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0194356994.html","https://issues.chromium.org/issues/553132214"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-93373","description":"Use after free in Extensions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95373","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95373","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95373","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95373","date":"2026-10-09","epss":0.00392,"percentile":0.31285}],"risk":0.31948000000000004,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/553130481"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95373","description":"Use after free in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87604","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87604","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87604","cwe":"CWE-125","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87604","date":"2026-10-09","epss":0.00404,"percentile":0.3263}],"risk":0.31916,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/536648007"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87604","description":"Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87639","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87639","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87639","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87639","date":"2026-10-09","epss":0.00404,"percentile":0.3263}],"risk":0.31916,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/544415098"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87639","description":"Use after free in WebPackaging in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87480","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87480","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87480","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87480","date":"2026-10-09","epss":0.00404,"percentile":0.32629}],"risk":0.31916,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/553928324"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87480","description":"Use after free in Printing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87506","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87506","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87506","cwe":"CWE-250","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87506","date":"2026-10-09","epss":0.00404,"percentile":0.32629}],"risk":0.31916,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/497551905"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87506","description":"Privilege elevation in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87479","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87479","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87479","cwe":"CWE-807","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87479","date":"2026-10-09","epss":0.00404,"percentile":0.32627}],"risk":0.31916,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/511772271"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87479","description":"Insufficient policy enforcement in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87537","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87537","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87537","cwe":"CWE-862","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87537","date":"2026-10-09","epss":0.00406,"percentile":0.32793}],"risk":0.31668,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/498732709"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87537","description":"Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-91729","versionConstraint":"< 153.0.8010.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-91729","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91729","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-91729","date":"2026-10-09","epss":0.00339,"percentile":0.25327}],"risk":0.31526999999999994,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0541751186.html","https://issues.chromium.org/issues/557206809"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91729","description":"Use after free in DigitalCredentials in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-91738","versionConstraint":"< 153.0.8010.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-91738","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91738","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-91738","date":"2026-10-09","epss":0.00339,"percentile":0.25326}],"risk":0.31526999999999994,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0541751186.html","https://issues.chromium.org/issues/536450979"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91738","description":"Improper input validation in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95341","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95341","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95341","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95341","date":"2026-10-09","epss":0.00399,"percentile":0.3204}],"risk":0.31521,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/523719002"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95341","description":"Improper input validation in Desktop in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106401","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106401","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106401","cwe":"CWE-787","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106401","date":"2026-10-09","epss":0.00338,"percentile":0.2523}],"risk":0.31433999999999995,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/553129739"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106401","description":"Out of bounds write in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106414","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106414","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106414","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106414","date":"2026-10-09","epss":0.00338,"percentile":0.2523}],"risk":0.31433999999999995,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/504223609"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106414","description":"Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106419","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106419","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106419","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106419","date":"2026-10-09","epss":0.00338,"percentile":0.2523}],"risk":0.31433999999999995,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/550379413"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106419","description":"Use after free in ANGLE in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106281","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106281","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106281","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106281","date":"2026-10-09","epss":0.00338,"percentile":0.25229}],"risk":0.31433999999999995,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/554992296"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106281","description":"Use after free in Tint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106298","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106298","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106298","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106298","date":"2026-10-09","epss":0.00338,"percentile":0.25229}],"risk":0.31433999999999995,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/555932520"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106298","description":"Use after free in Chrome Tabs in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106417","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106417","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106417","cwe":"CWE-190","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106417","date":"2026-10-09","epss":0.00338,"percentile":0.25186}],"risk":0.31433999999999995,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/536471438"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106417","description":"Integer overflow in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-91721","versionConstraint":"< 153.0.8010.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-91721","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91721","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-91721","date":"2026-10-09","epss":0.00385,"percentile":0.30538}],"risk":0.313775,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0541751186.html","https://issues.chromium.org/issues/557320614"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91721","description":"Use after free in Internals in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106235","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106235","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106235","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106235","date":"2026-10-09","epss":0.00383,"percentile":0.30283}],"risk":0.31214500000000006,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/565612897"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106235","description":"Use after free in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106268","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106268","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106268","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106268","date":"2026-10-09","epss":0.00383,"percentile":0.30283}],"risk":0.31214500000000006,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/565742177"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106268","description":"Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95338","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95338","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95338","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95338","date":"2026-10-09","epss":0.00382,"percentile":0.30117}],"risk":0.31133000000000005,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/556535630"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95338","description":"Use after free in PDFium in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87489","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87489","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87489","cwe":"CWE-119","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87489","date":"2026-10-09","epss":0.00382,"percentile":0.30076}],"risk":0.31133000000000005,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/539453394"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87489","description":"Memory corruption in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted Chrome extension. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87625","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87625","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87625","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87625","date":"2026-10-09","epss":0.00382,"percentile":0.30075}],"risk":0.31133000000000005,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/532921336"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87625","description":"Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106193","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106193","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106193","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106193","date":"2026-10-09","epss":0.00379,"percentile":0.29846}],"risk":0.308885,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/557729858"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106193","description":"Use after free in Parser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106200","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106200","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106200","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106200","date":"2026-10-09","epss":0.00379,"percentile":0.29846}],"risk":0.308885,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/568422505"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106200","description":"Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-91718","versionConstraint":"< 153.0.8010.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-91718","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91718","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-91718","date":"2026-10-09","epss":0.00332,"percentile":0.2436}],"risk":0.30876,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0541751186.html","https://issues.chromium.org/issues/553133215"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91718","description":"Use after free in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95355","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95355","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95355","cwe":"CWE-863","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95355","date":"2026-10-09","epss":0.0039,"percentile":0.31017}],"risk":0.3081,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/508462481"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95355","description":"Incorrect authorization in Navigation in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87582","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87582","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87582","cwe":"CWE-441","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87582","date":"2026-10-09","epss":0.00389,"percentile":0.30961}],"risk":0.30731,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/500094528"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87582","description":"Confused deputy in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87487","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87487","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87487","cwe":"CWE-862","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87487","date":"2026-10-09","epss":0.00389,"percentile":0.3096}],"risk":0.30731,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/495429423"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87487","description":"Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87544","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87544","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87544","cwe":"CWE-863","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87544","date":"2026-10-09","epss":0.00335,"percentile":0.24876}],"risk":0.30652500000000005,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/542355360"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87544","description":"Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c1fed726b9e0ccb7","cpes":["cpe:2.3:a:libcrypto3:libcrypto3:3.5.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto3:libcrypto:3.5.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto3:3.5.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto:3.5.8-r0:*:*:*:*:*:*:*"],"name":"libcrypto3","purl":"pkg:apk/alpine/libcrypto3@3.5.8-r0?arch=x86_64&distro=alpine-3.24.2&upstream=openssl","type":"apk","version":"3.5.8-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/ssl"},{"path":"/etc/ssl/ct_log_list.cnf"},{"path":"/etc/ssl/ct_log_list.cnf.dist"},{"path":"/etc/ssl/openssl.cnf"},{"path":"/etc/ssl/openssl.cnf.dist"},{"path":"/etc/ssl/certs"},{"path":"/etc/ssl/private"},{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcrypto.so.3"},{"path":"/usr/lib/engines-3"},{"path":"/usr/lib/engines-3/afalg.so"},{"path":"/usr/lib/engines-3/capi.so"},{"path":"/usr/lib/engines-3/loader_attic.so"},{"path":"/usr/lib/engines-3/padlock.so"},{"path":"/usr/lib/ossl-modules"},{"path":"/usr/lib/ossl-modules/legacy.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-84782","versionConstraint":">= 1.0.2, < 1.0.2zs||>= 1.1.1, < 1.1.1zj||>= 3.0.0, < 3.0.23||>= 3.4.0, < 3.4.8||>= 3.5.0, < 3.5.9||>= 3.6.0, < 3.6.5||>= 4.0.0, < 4.0.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.5.8:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.5.8-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-84782","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84782","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-84782","date":"2026-10-09","epss":0.0039,"percentile":0.3109}],"risk":0.30615,"urls":["https://github.com/openssl/openssl/commit/906cf0ef1c85ca40ce69163e9086d6d3fe292943","https://github.com/openssl/openssl/commit/9f6b34422af7eb5dac61322e33dac1ae989fa628","https://github.com/openssl/openssl/commit/a383dafdd754eb5b22bf45e37e1bff9d07277a58","https://github.com/openssl/openssl/commit/d951e02ede8f6a6ff8150546db44b34f0518192c","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-84782","description":"Issue summary: The DTLS retransmission logic does not correctly handle\na handshake message write that is suspended part-way through.\nThe retransmitted message can be read past the message buffer and\nthe retransmission overwrites the internal state the suspended write\nneeds to resume correctly.\n\nImpact summary: The retransmitted message can disclose a heap memory\nto the peer as plaintext handshake data or cause a crash and a Denial\nof Service when the read reaches an unmapped memory region.\n\nCWE: CWE-125: Out-of-bounds Read\n\nDescription: DTLS handshake messages can be written out in multiple\nfragments, and a write can suspend mid-message (returning WANT_WRITE)\nif the underlying transport temporarily cannot accept more data. While\nsuch a write is suspended, the DTLS retransmission timer may\nindependently fire and ask the retransmission logic to resend an\nearlier, already-acknowledged-as-sent message from its retransmit\nqueue.\n\nThe retransmission logic reused the same internal buffer and position\ntracking as the message that was still being written, without\nresetting the position back to the start of the message being\nretransmitted. As a result the retransmission was read starting from\nwherever the suspended write had left off, producing a mislabelled\nmessage whose body was leftover bytes from the other, larger message\nstill in flight - content that was never meant to be sent at that\npoint, and which could run past the end of the allocated buffer.\n\nSeparately, even when the retransmission is positioned correctly,\nallowing it to run to completion while another write is suspended\noverwrites the same shared bookkeeping that the suspended write\ndepends on to resume. When the application later resumes the\nsuspended write (via a subsequent SSL_read(), SSL_write(),\nSSL_accept(), or SSL_connect() call), it finds that bookkeeping in a\nstate inconsistent with the message and aborts the process in\na debugging build.\n\nThe fix resets the retransmission's read position to the start of the\nmessage before resending, and skips retransmission entirely whenever a\nhandshake write is still suspended, deferring to the next call that\nresumes it instead.\n\nFIPS impact: no\nThe affected code is outside the FIPS module boundary."},"relatedVulnerabilities":[]},{"artifact":{"id":"269544be9368a131","cpes":["cpe:2.3:a:libssl3:libssl3:3.5.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl3:libssl:3.5.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl3:3.5.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl:3.5.8-r0:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:apk/alpine/libssl3@3.5.8-r0?arch=x86_64&distro=alpine-3.24.2&upstream=openssl","type":"apk","version":"3.5.8-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libssl.so.3"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-84782","versionConstraint":">= 1.0.2, < 1.0.2zs||>= 1.1.1, < 1.1.1zj||>= 3.0.0, < 3.0.23||>= 3.4.0, < 3.4.8||>= 3.5.0, < 3.5.9||>= 3.6.0, < 3.6.5||>= 4.0.0, < 4.0.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.5.8:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.5.8-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-84782","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84782","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-84782","date":"2026-10-09","epss":0.0039,"percentile":0.3109}],"risk":0.30615,"urls":["https://github.com/openssl/openssl/commit/906cf0ef1c85ca40ce69163e9086d6d3fe292943","https://github.com/openssl/openssl/commit/9f6b34422af7eb5dac61322e33dac1ae989fa628","https://github.com/openssl/openssl/commit/a383dafdd754eb5b22bf45e37e1bff9d07277a58","https://github.com/openssl/openssl/commit/d951e02ede8f6a6ff8150546db44b34f0518192c","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-84782","description":"Issue summary: The DTLS retransmission logic does not correctly handle\na handshake message write that is suspended part-way through.\nThe retransmitted message can be read past the message buffer and\nthe retransmission overwrites the internal state the suspended write\nneeds to resume correctly.\n\nImpact summary: The retransmitted message can disclose a heap memory\nto the peer as plaintext handshake data or cause a crash and a Denial\nof Service when the read reaches an unmapped memory region.\n\nCWE: CWE-125: Out-of-bounds Read\n\nDescription: DTLS handshake messages can be written out in multiple\nfragments, and a write can suspend mid-message (returning WANT_WRITE)\nif the underlying transport temporarily cannot accept more data. While\nsuch a write is suspended, the DTLS retransmission timer may\nindependently fire and ask the retransmission logic to resend an\nearlier, already-acknowledged-as-sent message from its retransmit\nqueue.\n\nThe retransmission logic reused the same internal buffer and position\ntracking as the message that was still being written, without\nresetting the position back to the start of the message being\nretransmitted. As a result the retransmission was read starting from\nwherever the suspended write had left off, producing a mislabelled\nmessage whose body was leftover bytes from the other, larger message\nstill in flight - content that was never meant to be sent at that\npoint, and which could run past the end of the allocated buffer.\n\nSeparately, even when the retransmission is positioned correctly,\nallowing it to run to completion while another write is suspended\noverwrites the same shared bookkeeping that the suspended write\ndepends on to resume. When the application later resumes the\nsuspended write (via a subsequent SSL_read(), SSL_write(),\nSSL_accept(), or SSL_connect() call), it finds that bookkeeping in a\nstate inconsistent with the message and aborts the process in\na debugging build.\n\nThe fix resets the retransmission's read position to the start of the\nmessage before resending, and skips retransmission entirely whenever a\nhandshake write is still suspended, deferring to the next call that\nresumes it instead.\n\nFIPS impact: no\nThe affected code is outside the FIPS module boundary."},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-93382","versionConstraint":"< 153.0.8010.52 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-93382","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-93382","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-93382","date":"2026-10-09","epss":0.00373,"percentile":0.29202}],"risk":0.303995,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0194356994.html","https://issues.chromium.org/issues/541707261"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-93382","description":"Use after free in PDFium in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106241","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106241","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106241","cwe":"CWE-863","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106241","date":"2026-10-09","epss":0.00326,"percentile":0.23671}],"risk":0.30318,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/501729675"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106241","description":"Incorrect authorization in Search in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106323","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106323","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106323","cwe":"CWE-862","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106323","date":"2026-10-09","epss":0.00326,"percentile":0.23671}],"risk":0.30318,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/553114676"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106323","description":"Missing authorization in Chrome for iOS in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c1fed726b9e0ccb7","cpes":["cpe:2.3:a:libcrypto3:libcrypto3:3.5.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto3:libcrypto:3.5.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto3:3.5.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto:3.5.8-r0:*:*:*:*:*:*:*"],"name":"libcrypto3","purl":"pkg:apk/alpine/libcrypto3@3.5.8-r0?arch=x86_64&distro=alpine-3.24.2&upstream=openssl","type":"apk","version":"3.5.8-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/ssl"},{"path":"/etc/ssl/ct_log_list.cnf"},{"path":"/etc/ssl/ct_log_list.cnf.dist"},{"path":"/etc/ssl/openssl.cnf"},{"path":"/etc/ssl/openssl.cnf.dist"},{"path":"/etc/ssl/certs"},{"path":"/etc/ssl/private"},{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcrypto.so.3"},{"path":"/usr/lib/engines-3"},{"path":"/usr/lib/engines-3/afalg.so"},{"path":"/usr/lib/engines-3/capi.so"},{"path":"/usr/lib/engines-3/loader_attic.so"},{"path":"/usr/lib/engines-3/padlock.so"},{"path":"/usr/lib/ossl-modules"},{"path":"/usr/lib/ossl-modules/legacy.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-84784","versionConstraint":">= 3.4.0, < 3.4.8||>= 3.5.0, < 3.5.9||>= 3.6.0, < 3.6.5||>= 4.0.0, < 4.0.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.5.8:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.5.8-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-84784","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84784","cwe":"CWE-770","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-84784","date":"2026-10-09","epss":0.00403,"percentile":0.32538}],"risk":0.30225,"urls":["https://github.com/openssl/openssl/commit/4685c914b0d410b1034f40b547c95bc95e7a380a","https://github.com/openssl/openssl/commit/9a30fe0fba195c14e5b87bf93c0d0fdb70373806","https://github.com/openssl/openssl/commit/dba3c48d653c64fcbc9070a17a0ee2b3e2f3af1f","https://github.com/openssl/openssl/commit/e9e5155833fa968bee50024bf9ca3a185ab599fe","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-84784","description":"Issue summary: A malicious remote peer may flood the local QUIC\nstack with NEW_CONNECTION_ID frames by avoiding a limit check on\nhow many connection IDs the remote QUIC stack can use.\n\nImpact summary: The local QUIC stack sends a RETIRE_CONN_ID frame\nfor every NEW_CONNECTION_ID frame it receives. The RETIRE_CONN_ID\nframe is dispatched via the Control Frame Queue (CFQ). If the remote\npeer also withholds ACKs, then it can force the local stack\nto allocate ~400MB (depending on ACK delay).\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: RFC 9000 sections 5.1.1 and 5.1.2 [1] describe the mechanism\nby which a remote peer can notify the local QUIC stack to change the\ndestination connection ID (a.k.a. CID) the local stack uses to\nidentify the connection at the remote peer. Each CID is associated\nwith a sequence number. The sequence number is transmitted\nin NEW_CONNECTION_ID and RETIRE_CONNECTION_ID frames to identify the CID\nwhich is being either associated with a connection or retired.\n\nThe remote peer sends a NEW_CONNECTION_ID frame to let the local stack know\na new CID is being associated with an existing connection. The\nNEW_CONNECTION_ID frame carries the new CID, its sequence number, and the\nretire-prior-to number. The retire-prior-to identifies existing\nCIDs that are to be retired. The local QUIC stack must send a\nRETIRE_CONNECTION_ID for every destination CID whose sequence number\nis less than retire-prior-to. The CID becomes retired after the\nlocal stack receives an ACK for its RETIRE_CONNECTION_ID frame.\n\nAlthough the OpenSSL QUIC stack supports at most one destination CID\nfor every connection, it can be tricked into processing more than\none RETIRE_CONNECTION_ID frame per connection. The OpenSSL QUIC\nstack currently retires the destination CID as soon as it receives\nthe NEW_CONNECTION_ID, while in fact the destination CID must\nbe retired after an ACK for the RETIRE_CONNECTION_ID frame is received.\nCorrecting the flawed logic also fixes the backlog growth.\n\n[1] https://datatracker.ietf.org/doc/html/rfc9000#name-issuing-connection-ids\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary."},"relatedVulnerabilities":[]},{"artifact":{"id":"269544be9368a131","cpes":["cpe:2.3:a:libssl3:libssl3:3.5.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl3:libssl:3.5.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl3:3.5.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl:3.5.8-r0:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:apk/alpine/libssl3@3.5.8-r0?arch=x86_64&distro=alpine-3.24.2&upstream=openssl","type":"apk","version":"3.5.8-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libssl.so.3"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-84784","versionConstraint":">= 3.4.0, < 3.4.8||>= 3.5.0, < 3.5.9||>= 3.6.0, < 3.6.5||>= 4.0.0, < 4.0.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.5.8:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.5.8-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-84784","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84784","cwe":"CWE-770","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-84784","date":"2026-10-09","epss":0.00403,"percentile":0.32538}],"risk":0.30225,"urls":["https://github.com/openssl/openssl/commit/4685c914b0d410b1034f40b547c95bc95e7a380a","https://github.com/openssl/openssl/commit/9a30fe0fba195c14e5b87bf93c0d0fdb70373806","https://github.com/openssl/openssl/commit/dba3c48d653c64fcbc9070a17a0ee2b3e2f3af1f","https://github.com/openssl/openssl/commit/e9e5155833fa968bee50024bf9ca3a185ab599fe","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-84784","description":"Issue summary: A malicious remote peer may flood the local QUIC\nstack with NEW_CONNECTION_ID frames by avoiding a limit check on\nhow many connection IDs the remote QUIC stack can use.\n\nImpact summary: The local QUIC stack sends a RETIRE_CONN_ID frame\nfor every NEW_CONNECTION_ID frame it receives. The RETIRE_CONN_ID\nframe is dispatched via the Control Frame Queue (CFQ). If the remote\npeer also withholds ACKs, then it can force the local stack\nto allocate ~400MB (depending on ACK delay).\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: RFC 9000 sections 5.1.1 and 5.1.2 [1] describe the mechanism\nby which a remote peer can notify the local QUIC stack to change the\ndestination connection ID (a.k.a. CID) the local stack uses to\nidentify the connection at the remote peer. Each CID is associated\nwith a sequence number. The sequence number is transmitted\nin NEW_CONNECTION_ID and RETIRE_CONNECTION_ID frames to identify the CID\nwhich is being either associated with a connection or retired.\n\nThe remote peer sends a NEW_CONNECTION_ID frame to let the local stack know\na new CID is being associated with an existing connection. The\nNEW_CONNECTION_ID frame carries the new CID, its sequence number, and the\nretire-prior-to number. The retire-prior-to identifies existing\nCIDs that are to be retired. The local QUIC stack must send a\nRETIRE_CONNECTION_ID for every destination CID whose sequence number\nis less than retire-prior-to. The CID becomes retired after the\nlocal stack receives an ACK for its RETIRE_CONNECTION_ID frame.\n\nAlthough the OpenSSL QUIC stack supports at most one destination CID\nfor every connection, it can be tricked into processing more than\none RETIRE_CONNECTION_ID frame per connection. The OpenSSL QUIC\nstack currently retires the destination CID as soon as it receives\nthe NEW_CONNECTION_ID, while in fact the destination CID must\nbe retired after an ACK for the RETIRE_CONNECTION_ID frame is received.\nCorrecting the flawed logic also fixes the backlog growth.\n\n[1] https://datatracker.ietf.org/doc/html/rfc9000#name-issuing-connection-ids\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary."},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-103630","versionConstraint":"< 154.0.8037.97 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-103630","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-103630","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-103630","date":"2026-10-09","epss":0.00325,"percentile":0.23549}],"risk":0.30224999999999996,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/557323166"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-103630","description":"Use after free in FedCM in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106194","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106194","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106194","cwe":"CWE-862","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106194","date":"2026-10-09","epss":0.00378,"percentile":0.29674}],"risk":0.29862,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/498739277"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106194","description":"Missing authorization in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95354","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95354","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95354","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95354","date":"2026-10-09","epss":0.00374,"percentile":0.29276}],"risk":0.29546,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/524582798"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95354","description":"Use after free in Verifier in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106190","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106190","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106190","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106190","date":"2026-10-09","epss":0.00361,"percentile":0.27841}],"risk":0.294215,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/566824998"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106190","description":"Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106374","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106374","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106374","cwe":"CWE-843","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106374","date":"2026-10-09","epss":0.00361,"percentile":0.27821}],"risk":0.294215,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/552832446"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106374","description":"Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106233","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106233","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106233","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106233","date":"2026-10-09","epss":0.00371,"percentile":0.28958}],"risk":0.29309,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/565797213"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106233","description":"Use after free in Metrics in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106234","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106234","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106234","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106234","date":"2026-10-09","epss":0.00312,"percentile":0.22156}],"risk":0.29016,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/564085088"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106234","description":"Use after free in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-91710","versionConstraint":"< 153.0.8010.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-91710","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91710","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-91710","date":"2026-10-09","epss":0.00311,"percentile":0.22001}],"risk":0.28922999999999993,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0541751186.html","https://issues.chromium.org/issues/553132148"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91710","description":"Use after free in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-91716","versionConstraint":"< 153.0.8010.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-91716","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91716","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-91716","date":"2026-10-09","epss":0.00311,"percentile":0.22001}],"risk":0.28922999999999993,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0541751186.html","https://issues.chromium.org/issues/554558368"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91716","description":"Use after free in Auth in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"9e813491f50ba632","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64833","versionConstraint":">= 0.7.1, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64833","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":4.3,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64833","cwe":"CWE-125","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64833","date":"2026-10-09","epss":0.00396,"percentile":0.31706}],"risk":0.28908,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64833","description":"FFmpeg versions 0.7.1 through 8.1.2 contain an out-of-bounds read vulnerability in the S/PDIF muxer that allows attackers to access memory beyond buffer boundaries by supplying a crafted DTS stream with a core_size value larger than the actual packet length. Attackers can exploit the missing bounds check in the spdif_header_dts4 function by providing a malicious DTS-HD audio stream during S/PDIF re-muxing to trigger unauthorized memory reads beyond the packet buffer."},"relatedVulnerabilities":[]},{"artifact":{"id":"d07d7332fd90e2f5","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64833","versionConstraint":">= 0.7.1, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64833","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":4.3,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64833","cwe":"CWE-125","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64833","date":"2026-10-09","epss":0.00396,"percentile":0.31706}],"risk":0.28908,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64833","description":"FFmpeg versions 0.7.1 through 8.1.2 contain an out-of-bounds read vulnerability in the S/PDIF muxer that allows attackers to access memory beyond buffer boundaries by supplying a crafted DTS stream with a core_size value larger than the actual packet length. Attackers can exploit the missing bounds check in the spdif_header_dts4 function by providing a malicious DTS-HD audio stream during S/PDIF re-muxing to trigger unauthorized memory reads beyond the packet buffer."},"relatedVulnerabilities":[]},{"artifact":{"id":"50075ec0b9beb4e7","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64833","versionConstraint":">= 0.7.1, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64833","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":4.3,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64833","cwe":"CWE-125","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64833","date":"2026-10-09","epss":0.00396,"percentile":0.31706}],"risk":0.28908,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64833","description":"FFmpeg versions 0.7.1 through 8.1.2 contain an out-of-bounds read vulnerability in the S/PDIF muxer that allows attackers to access memory beyond buffer boundaries by supplying a crafted DTS stream with a core_size value larger than the actual packet length. Attackers can exploit the missing bounds check in the spdif_header_dts4 function by providing a malicious DTS-HD audio stream during S/PDIF re-muxing to trigger unauthorized memory reads beyond the packet buffer."},"relatedVulnerabilities":[]},{"artifact":{"id":"15f575ddc365a154","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64833","versionConstraint":">= 0.7.1, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64833","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":4.3,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64833","cwe":"CWE-125","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64833","date":"2026-10-09","epss":0.00396,"percentile":0.31706}],"risk":0.28908,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64833","description":"FFmpeg versions 0.7.1 through 8.1.2 contain an out-of-bounds read vulnerability in the S/PDIF muxer that allows attackers to access memory beyond buffer boundaries by supplying a crafted DTS stream with a core_size value larger than the actual packet length. Attackers can exploit the missing bounds check in the spdif_header_dts4 function by providing a malicious DTS-HD audio stream during S/PDIF re-muxing to trigger unauthorized memory reads beyond the packet buffer."},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-102304","versionConstraint":"< 154.0.8037.92 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-102304","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102304","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-102304","date":"2026-10-09","epss":0.0031,"percentile":0.2196}],"risk":0.28829999999999995,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01807488085.html","https://issues.chromium.org/issues/560251736"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102304","description":"Use after free in Passwords in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-102308","versionConstraint":"< 154.0.8037.92 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-102308","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102308","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-102308","date":"2026-10-09","epss":0.0031,"percentile":0.2196}],"risk":0.28829999999999995,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01807488085.html","https://issues.chromium.org/issues/561997480"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102308","description":"Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-102309","versionConstraint":"< 154.0.8037.92 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-102309","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102309","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-102309","date":"2026-10-09","epss":0.0031,"percentile":0.2196}],"risk":0.28829999999999995,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01807488085.html","https://issues.chromium.org/issues/560867085"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102309","description":"Use after free in FullScreen in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-102316","versionConstraint":"< 154.0.8037.92 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-102316","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102316","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-102316","date":"2026-10-09","epss":0.0031,"percentile":0.2196}],"risk":0.28829999999999995,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01807488085.html","https://issues.chromium.org/issues/560238698"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102316","description":"Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106204","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106204","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106204","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106204","date":"2026-10-09","epss":0.0035,"percentile":0.26555}],"risk":0.28525000000000006,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/567910530"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106204","description":"Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-102302","versionConstraint":"< 154.0.8037.92 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-102302","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102302","cwe":"CWE-121","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-102302","date":"2026-10-09","epss":0.00348,"percentile":0.26304}],"risk":0.28362,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01807488085.html","https://issues.chromium.org/issues/563716534"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102302","description":"Buffer overflow in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106228","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106228","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106228","cwe":"CWE-441","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106228","date":"2026-10-09","epss":0.00357,"percentile":0.27433}],"risk":0.28203,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/517689673"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106228","description":"Confused deputy in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106191","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106191","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106191","cwe":"CWE-862","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106191","date":"2026-10-09","epss":0.00357,"percentile":0.27432}],"risk":0.28203,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/502282293"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106191","description":"Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"eb222fe89d397776","cpes":["cpe:2.3:a:zlib:zlib:1.3.2-r0:*:*:*:*:*:*:*"],"name":"zlib","purl":"pkg:apk/alpine/zlib@1.3.2-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"1.3.2-r0","language":"","licenses":["Zlib"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libz.so.1"},{"path":"/usr/lib/libz.so.1.3.2"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"zlib"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.3.2-r1"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-85091","versionConstraint":"< 1.3.2-r1 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.2"},"package":{"name":"zlib","version":"1.3.2-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"1.3.2-r1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-85091","versionConstraint":"< 1.3.2-r1 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.2"},"package":{"name":"zlib","version":"1.3.2-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-85091","fix":{"state":"fixed","versions":["1.3.2-r1"],"available":[{"date":"2026-10-07","kind":"first-observed","version":"1.3.2-r1"}]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-85091","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-85091","date":"2026-10-09","epss":0.00356,"percentile":0.2726}],"risk":0.28124,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-85091"},"relatedVulnerabilities":[{"id":"CVE-2026-85091","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-85091","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-85091","date":"2026-10-09","epss":0.00356,"percentile":0.2726}],"urls":["https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490","https://github.com/madler/zlib","https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393","https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-85091","description":"zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function when processing non-blocking gzwrite() operations with stale external buffer pointers. Attackers can trigger the overflow by calling gzprintf() or gzvprintf() after a write stall, causing an unchecked memmove() to write beyond the internal input buffer boundary."}]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106203","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106203","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106203","cwe":"CWE-459","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106203","date":"2026-10-09","epss":0.00345,"percentile":0.25959}],"risk":0.281175,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/553394296"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106203","description":"Incomplete cleanup in Autofill in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106195","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106195","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106195","cwe":"CWE-863","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106195","date":"2026-10-09","epss":0.00309,"percentile":0.2184}],"risk":0.279645,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/553930843"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106195","description":"Incorrect authorization in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traffic. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-91745","versionConstraint":"< 153.0.8010.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-91745","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91745","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-91745","date":"2026-10-09","epss":0.00339,"percentile":0.25327}],"risk":0.276285,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0541751186.html","https://issues.chromium.org/issues/558734727"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91745","description":"Use after free in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-91736","versionConstraint":"< 153.0.8010.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-91736","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91736","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-91736","date":"2026-10-09","epss":0.00339,"percentile":0.25326}],"risk":0.276285,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0541751186.html","https://issues.chromium.org/issues/553121008"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91736","description":"Use after free in DOM in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-91737","versionConstraint":"< 153.0.8010.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-91737","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91737","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-91737","date":"2026-10-09","epss":0.00339,"percentile":0.25326}],"risk":0.276285,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0541751186.html","https://issues.chromium.org/issues/558036280"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91737","description":"Use after free in PDF in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-102321","versionConstraint":"< 154.0.8037.92 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-102321","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102321","cwe":"CWE-843","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-102321","date":"2026-10-09","epss":0.00339,"percentile":0.25305}],"risk":0.276285,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01807488085.html","https://issues.chromium.org/issues/565328105"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102321","description":"Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"a9520678d56066a2","cpes":["cpe:2.3:a:OpenPrinting:cups-libs:2.4.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:OpenPrinting:cups_libs:2.4.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cups-libs:cups-libs:2.4.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cups-libs:cups_libs:2.4.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cups_libs:cups-libs:2.4.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cups_libs:cups_libs:2.4.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cups:cups-libs:2.4.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cups:cups_libs:2.4.19-r1:*:*:*:*:*:*:*"],"name":"cups-libs","purl":"pkg:apk/alpine/cups-libs@2.4.19-r1?arch=x86_64&distro=alpine-3.24.2&upstream=cups","type":"apk","version":"2.4.19-r1","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcups.so.2"},{"path":"/usr/lib/libcupsimage.so.2"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"cups"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:cups:cups:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2018-6553","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:cups:cups:2.4.19:*:*:*:*:*:*:*"],"package":{"name":"cups","version":"2.4.19-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2018-6553","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":6.1,"exploitabilityScore":2.1},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":4.6,"impactScore":6.5,"exploitabilityScore":4},"version":"2.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2018-6553","date":"2026-10-09","epss":0.00385,"percentile":0.30451}],"risk":0.27335,"urls":["https://lists.debian.org/debian-lts-announce/2018/07/msg00014.html","https://security.gentoo.org/glsa/201908-08","https://usn.ubuntu.com/usn/usn-3713-1","https://www.debian.org/security/2018/dsa-4243"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-6553","description":"The CUPS AppArmor profile incorrectly confined the dnssd backend due to use of hard links. A local attacker could possibly use this issue to escape confinement. This flaw affects versions prior to 2.2.7-1ubuntu2.1 in Ubuntu 18.04 LTS, prior to 2.2.4-7ubuntu3.1 in Ubuntu 17.10, prior to 2.1.3-4ubuntu0.5 in Ubuntu 16.04 LTS, and prior to 1.7.2-0ubuntu1.10 in Ubuntu 14.04 LTS."},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87569","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87569","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87569","cwe":"CWE-862","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87569","date":"2026-10-09","epss":0.00335,"percentile":0.24875}],"risk":0.2730250000000001,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/523277481"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87569","description":"Missing authorization in Views in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"9e813491f50ba632","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64832","versionConstraint":">= 4.4, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64832","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64832","cwe":"CWE-415","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64832","date":"2026-10-09","epss":0.00335,"percentile":0.2484}],"risk":0.27218749999999997,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664","https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64832","description":"FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC hardware decoder within libavcodec/nvdec.c that allows attackers to trigger memory corruption by supplying a crafted video file. When no decoder surfaces remain, the ff_nvdec_start_frame_sep_ref error path frees memory via nvdec_fdd_priv_free while the calling layer subsequently frees the same frame description data, resulting in a double-free of the underlying decoder context in any FFmpeg-based application using NVDEC hardware-accelerated decoding."},"relatedVulnerabilities":[]},{"artifact":{"id":"d07d7332fd90e2f5","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64832","versionConstraint":">= 4.4, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64832","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64832","cwe":"CWE-415","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64832","date":"2026-10-09","epss":0.00335,"percentile":0.2484}],"risk":0.27218749999999997,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664","https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64832","description":"FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC hardware decoder within libavcodec/nvdec.c that allows attackers to trigger memory corruption by supplying a crafted video file. When no decoder surfaces remain, the ff_nvdec_start_frame_sep_ref error path frees memory via nvdec_fdd_priv_free while the calling layer subsequently frees the same frame description data, resulting in a double-free of the underlying decoder context in any FFmpeg-based application using NVDEC hardware-accelerated decoding."},"relatedVulnerabilities":[]},{"artifact":{"id":"50075ec0b9beb4e7","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64832","versionConstraint":">= 4.4, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64832","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64832","cwe":"CWE-415","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64832","date":"2026-10-09","epss":0.00335,"percentile":0.2484}],"risk":0.27218749999999997,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664","https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64832","description":"FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC hardware decoder within libavcodec/nvdec.c that allows attackers to trigger memory corruption by supplying a crafted video file. When no decoder surfaces remain, the ff_nvdec_start_frame_sep_ref error path frees memory via nvdec_fdd_priv_free while the calling layer subsequently frees the same frame description data, resulting in a double-free of the underlying decoder context in any FFmpeg-based application using NVDEC hardware-accelerated decoding."},"relatedVulnerabilities":[]},{"artifact":{"id":"15f575ddc365a154","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-64832","versionConstraint":">= 4.4, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-64832","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64832","cwe":"CWE-415","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64832","date":"2026-10-09","epss":0.00335,"percentile":0.2484}],"risk":0.27218749999999997,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664","https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64832","description":"FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC hardware decoder within libavcodec/nvdec.c that allows attackers to trigger memory corruption by supplying a crafted video file. When no decoder surfaces remain, the ff_nvdec_start_frame_sep_ref error path frees memory via nvdec_fdd_priv_free while the calling layer subsequently frees the same frame description data, resulting in a double-free of the underlying decoder context in any FFmpeg-based application using NVDEC hardware-accelerated decoding."},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106387","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106387","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106387","cwe":"CWE-862","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106387","date":"2026-10-09","epss":0.00333,"percentile":0.24481}],"risk":0.271395,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/518096516"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106387","description":"Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106212","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106212","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106212","cwe":"CWE-863","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106212","date":"2026-10-09","epss":0.00333,"percentile":0.2448}],"risk":0.271395,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/540072162"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106212","description":"Incorrect authorization in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106335","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106335","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106335","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106335","date":"2026-10-09","epss":0.00331,"percentile":0.24183}],"risk":0.26976500000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/502105238"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106335","description":"Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106383","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106383","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106383","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106383","date":"2026-10-09","epss":0.00331,"percentile":0.24183}],"risk":0.26976500000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/567447106"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106383","description":"Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106207","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106207","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106207","cwe":"CWE-367","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106207","date":"2026-10-09","epss":0.0033,"percentile":0.24148}],"risk":0.26895,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/554619028"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106207","description":"Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-91724","versionConstraint":"< 153.0.8010.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-91724","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91724","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-91724","date":"2026-10-09","epss":0.00336,"percentile":0.25003}],"risk":0.26544,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0541751186.html","https://issues.chromium.org/issues/552283275"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91724","description":"Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-102326","versionConstraint":"< 154.0.8037.92 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-102326","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102326","cwe":"CWE-843","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-102326","date":"2026-10-09","epss":0.00325,"percentile":0.23643}],"risk":0.264875,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01807488085.html","https://issues.chromium.org/issues/560233248"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102326","description":"Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-102328","versionConstraint":"< 154.0.8037.92 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-102328","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102328","cwe":"CWE-843","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-102328","date":"2026-10-09","epss":0.00325,"percentile":0.23643}],"risk":0.264875,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01807488085.html","https://issues.chromium.org/issues/560536732"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102328","description":"Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-91715","versionConstraint":"< 153.0.8010.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-91715","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91715","cwe":"CWE-843","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-91715","date":"2026-10-09","epss":0.00325,"percentile":0.23643}],"risk":0.264875,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0541751186.html","https://issues.chromium.org/issues/558367547"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91715","description":"Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106247","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106247","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106247","cwe":"CWE-122","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106247","date":"2026-10-09","epss":0.00332,"percentile":0.24353}],"risk":0.26228,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/524435922"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106247","description":"Buffer overflow in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106292","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106292","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106292","cwe":"CWE-122","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106292","date":"2026-10-09","epss":0.00332,"percentile":0.24353}],"risk":0.26228,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/524587778"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106292","description":"Buffer overflow in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-103625","versionConstraint":"< 154.0.8037.97 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-103625","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-103625","cwe":"CWE-843","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-103625","date":"2026-10-09","epss":0.00317,"percentile":0.22651}],"risk":0.25835500000000006,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/559893859"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-103625","description":"Type confusion in V8 in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106220","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106220","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106220","cwe":"CWE-200","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106220","date":"2026-10-09","epss":0.00317,"percentile":0.22632}],"risk":0.25835500000000006,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/534843648"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106220","description":"Information leak in Passwords in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"9e813491f50ba632","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66038","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66038","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66038","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66038","date":"2026-10-09","epss":0.00439,"percentile":0.36234}],"risk":0.256815,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/e7cbfd1c507b57a806a5825b87d609963e862c8c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23626","https://www.vulncheck.com/advisories/ffmpeg-lcl-zlib-video-decoder-information-disclosure-via-lcldec-c"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66038","description":"FFmpeg through 8.1.2, fixed in commit 8670835, contains an information disclosure vulnerability in the LCL/ZLIB video decoder that allows attackers to expose uninitialized heap memory by supplying a valid zlib stream that inflates to fewer bytes than the expected frame size. The zlib_decomp() function in lcldec.c treats short decompression as non-fatal and continues to the RGB24 conversion path, which copies a full frame's worth of rows from the allocation buffer using original frame dimensions, causing uninitialized heap contents including pointer-derived allocator bytes to be copied into the attacker-observable AVFrame output and potentially defeating ASLR in long-lived media processing services."},"relatedVulnerabilities":[]},{"artifact":{"id":"d07d7332fd90e2f5","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66038","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66038","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66038","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66038","date":"2026-10-09","epss":0.00439,"percentile":0.36234}],"risk":0.256815,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/e7cbfd1c507b57a806a5825b87d609963e862c8c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23626","https://www.vulncheck.com/advisories/ffmpeg-lcl-zlib-video-decoder-information-disclosure-via-lcldec-c"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66038","description":"FFmpeg through 8.1.2, fixed in commit 8670835, contains an information disclosure vulnerability in the LCL/ZLIB video decoder that allows attackers to expose uninitialized heap memory by supplying a valid zlib stream that inflates to fewer bytes than the expected frame size. The zlib_decomp() function in lcldec.c treats short decompression as non-fatal and continues to the RGB24 conversion path, which copies a full frame's worth of rows from the allocation buffer using original frame dimensions, causing uninitialized heap contents including pointer-derived allocator bytes to be copied into the attacker-observable AVFrame output and potentially defeating ASLR in long-lived media processing services."},"relatedVulnerabilities":[]},{"artifact":{"id":"50075ec0b9beb4e7","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66038","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66038","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66038","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66038","date":"2026-10-09","epss":0.00439,"percentile":0.36234}],"risk":0.256815,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/e7cbfd1c507b57a806a5825b87d609963e862c8c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23626","https://www.vulncheck.com/advisories/ffmpeg-lcl-zlib-video-decoder-information-disclosure-via-lcldec-c"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66038","description":"FFmpeg through 8.1.2, fixed in commit 8670835, contains an information disclosure vulnerability in the LCL/ZLIB video decoder that allows attackers to expose uninitialized heap memory by supplying a valid zlib stream that inflates to fewer bytes than the expected frame size. The zlib_decomp() function in lcldec.c treats short decompression as non-fatal and continues to the RGB24 conversion path, which copies a full frame's worth of rows from the allocation buffer using original frame dimensions, causing uninitialized heap contents including pointer-derived allocator bytes to be copied into the attacker-observable AVFrame output and potentially defeating ASLR in long-lived media processing services."},"relatedVulnerabilities":[]},{"artifact":{"id":"15f575ddc365a154","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66038","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66038","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66038","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66038","date":"2026-10-09","epss":0.00439,"percentile":0.36234}],"risk":0.256815,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/e7cbfd1c507b57a806a5825b87d609963e862c8c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23626","https://www.vulncheck.com/advisories/ffmpeg-lcl-zlib-video-decoder-information-disclosure-via-lcldec-c"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66038","description":"FFmpeg through 8.1.2, fixed in commit 8670835, contains an information disclosure vulnerability in the LCL/ZLIB video decoder that allows attackers to expose uninitialized heap memory by supplying a valid zlib stream that inflates to fewer bytes than the expected frame size. The zlib_decomp() function in lcldec.c treats short decompression as non-fatal and continues to the RGB24 conversion path, which copies a full frame's worth of rows from the allocation buffer using original frame dimensions, causing uninitialized heap contents including pointer-derived allocator bytes to be copied into the attacker-observable AVFrame output and potentially defeating ASLR in long-lived media processing services."},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106293","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106293","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106293","cwe":"CWE-843","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106293","date":"2026-10-09","epss":0.00323,"percentile":0.23359}],"risk":0.25517,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/547343108"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106293","description":"Type confusion in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106378","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106378","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106378","cwe":"CWE-250","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106378","date":"2026-10-09","epss":0.00323,"percentile":0.23351}],"risk":0.25517,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/507596239"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106378","description":"Privilege elevation in Sandbox in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-91711","versionConstraint":"< 153.0.8010.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-91711","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91711","cwe":"CWE-787","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-91711","date":"2026-10-09","epss":0.00311,"percentile":0.22001}],"risk":0.25346500000000005,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0541751186.html","https://issues.chromium.org/issues/558342353"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91711","description":"Out of bounds write in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-91722","versionConstraint":"< 153.0.8010.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-91722","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91722","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-91722","date":"2026-10-09","epss":0.00311,"percentile":0.22001}],"risk":0.25346500000000005,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0541751186.html","https://issues.chromium.org/issues/554953456"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91722","description":"Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87570","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87570","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87570","cwe":"CWE-863","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87570","date":"2026-10-09","epss":0.00309,"percentile":0.21812}],"risk":0.251835,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/517215407"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87570","description":"Incorrect authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted file. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"2fdbaca63b76adb3","cpes":["cpe:2.3:a:golang:text:v0.40.0:*:*:*:*:*:*:*"],"name":"golang.org/x/text","purl":"pkg:golang/golang.org/x/text@v0.40.0","type":"go-module","version":"v0.40.0","language":"go","licenses":[],"metadata":{"h1Digest":"h1:Ub2Z6/xjgF1WrYQz2nuITOEegKFtiIy+rieRJ5lHZKs=","mainModule":"k6","architecture":"amd64","goCompiledVersion":"go1.26.6"},"locations":[{"path":"/usr/libexec/sm-k6/k6-v1","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/usr/libexec/sm-k6/k6-v1","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.41.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6629","versionConstraint":"<0.41.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/text","version":"v0.40.0"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6629","fix":{"state":"fixed","versions":["0.41.0"],"available":[{"date":"2026-08-11","kind":"release","version":"0.41.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56851","cwe":"CWE-787","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-56851","date":"2026-10-09","epss":0.00335,"percentile":0.24829}],"risk":0.25125,"urls":["https://go.dev/issue/80112"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/793360","description":"The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer."},"relatedVulnerabilities":[{"id":"CVE-2026-56851","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56851","cwe":"CWE-787","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-56851","date":"2026-10-09","epss":0.00335,"percentile":0.24829}],"urls":["https://go.dev/cl/793360","https://go.dev/issue/80112","https://pkg.go.dev/vuln/GO-2026-6629"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56851","description":"The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer."}]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87534","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87534","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87534","cwe":"CWE-862","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87534","date":"2026-10-09","epss":0.00292,"percentile":0.19991}],"risk":0.25039,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/513134173"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87534","description":"Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-91733","versionConstraint":"< 153.0.8010.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-91733","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91733","cwe":"CWE-754","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-91733","date":"2026-10-09","epss":0.00315,"percentile":0.22465}],"risk":0.24885000000000002,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0541751186.html","https://issues.chromium.org/issues/540021213"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91733","description":"Improper state validation in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106225","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106225","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106225","cwe":"CWE-862","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106225","date":"2026-10-09","epss":0.00305,"percentile":0.21369}],"risk":0.24857500000000005,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/501805355"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106225","description":"Missing authorization in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95314","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95314","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95314","cwe":"CWE-863","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95314","date":"2026-10-09","epss":0.00317,"percentile":0.227}],"risk":0.24726,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/517802696"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95314","description":"Incorrect authorization in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87499","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87499","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87499","cwe":"CWE-863","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87499","date":"2026-10-09","epss":0.00317,"percentile":0.22665}],"risk":0.24726,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/553118043"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87499","description":"Incorrect authorization in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87606","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87606","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87606","cwe":"CWE-862","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87606","date":"2026-10-09","epss":0.00317,"percentile":0.22665}],"risk":0.24726,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/495933780"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87606","description":"Missing authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87471","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87471","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87471","cwe":"CWE-863","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87471","date":"2026-10-09","epss":0.00317,"percentile":0.22664}],"risk":0.24726,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/498869663"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87471","description":"Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106283","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106283","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106283","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106283","date":"2026-10-09","epss":0.00303,"percentile":0.21175}],"risk":0.24694500000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/499468981"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106283","description":"Use after free in Streaming in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106318","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106318","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106318","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106318","date":"2026-10-09","epss":0.00303,"percentile":0.21175}],"risk":0.24694500000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/566111249"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106318","description":"Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106421","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106421","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106421","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106421","date":"2026-10-09","epss":0.00303,"percentile":0.21175}],"risk":0.24694500000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/567873463"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106421","description":"Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-103622","versionConstraint":"< 154.0.8037.97 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-103622","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-103622","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-103622","date":"2026-10-09","epss":0.00303,"percentile":0.21174}],"risk":0.24694500000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/565742179"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-103622","description":"Use after free in SVG in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-103623","versionConstraint":"< 154.0.8037.97 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-103623","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-103623","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-103623","date":"2026-10-09","epss":0.00303,"percentile":0.21174}],"risk":0.24694500000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/565742180"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-103623","description":"Use after free in MediaStream in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106315","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106315","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106315","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106315","date":"2026-10-09","epss":0.00303,"percentile":0.21174}],"risk":0.24694500000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/497652727"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106315","description":"Use after free in Modularization in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106423","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106423","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106423","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106423","date":"2026-10-09","epss":0.00303,"percentile":0.21174}],"risk":0.24694500000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/566347711"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106423","description":"Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106248","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106248","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106248","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106248","date":"2026-10-09","epss":0.00303,"percentile":0.21173}],"risk":0.24694500000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/563673584"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106248","description":"Use after free in Bindings in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106257","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106257","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106257","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106257","date":"2026-10-09","epss":0.00303,"percentile":0.21173}],"risk":0.24694500000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/565674529"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106257","description":"Use after free in HTML in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106269","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106269","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106269","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106269","date":"2026-10-09","epss":0.00303,"percentile":0.21173}],"risk":0.24694500000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/565742178"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106269","description":"Use after free in CSS in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106252","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106252","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106252","cwe":"CWE-697","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106252","date":"2026-10-09","epss":0.00303,"percentile":0.21172}],"risk":0.24694500000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/513446410"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106252","description":"Incorrect comparison in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106278","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106278","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106278","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106278","date":"2026-10-09","epss":0.00303,"percentile":0.21137}],"risk":0.24694500000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/565774991"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106278","description":"Use after free in Select in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106291","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106291","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106291","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106291","date":"2026-10-09","epss":0.00303,"percentile":0.21137}],"risk":0.24694500000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/499571442"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106291","description":"Use after free in GarbageCollection in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106411","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106411","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106411","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106411","date":"2026-10-09","epss":0.00303,"percentile":0.21137}],"risk":0.24694500000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/566136674"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106411","description":"Use after free in Parser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95301","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95301","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95301","cwe":"CWE-862","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95301","date":"2026-10-09","epss":0.00315,"percentile":0.22485}],"risk":0.2457,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/540265100"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95301","description":"Missing authorization in Extensions in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-91735","versionConstraint":"< 153.0.8010.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-91735","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91735","cwe":"CWE-863","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-91735","date":"2026-10-09","epss":0.00311,"percentile":0.22043}],"risk":0.24569000000000002,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0541751186.html","https://issues.chromium.org/issues/552416113"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91735","description":"Incorrect authorization in WebUI in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87431","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87431","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87431","cwe":"CWE-862","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87431","date":"2026-10-09","epss":0.00321,"percentile":0.23079}],"risk":0.24075,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/523313374"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87431","description":"Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted Chrome extension. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87450","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87450","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87450","cwe":"CWE-863","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87450","date":"2026-10-09","epss":0.00321,"percentile":0.23079}],"risk":0.24075,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/517432155"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87450","description":"Incorrect authorization in Permissions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"5072120da1bad992","cpes":["cpe:2.3:a:DaveGamble:cjson:1.7.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cjson:cjson:1.7.19-r1:*:*:*:*:*:*:*"],"name":"cjson","purl":"pkg:apk/alpine/cjson@1.7.19-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"1.7.19-r1","language":"","licenses":["MIT"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcjson.so.1"},{"path":"/usr/lib/libcjson.so.1.7.19"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"cjson"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:davegamble:cjson:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-67217","versionConstraint":"<= 1.7.19 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:DaveGamble:cjson:1.7.19:*:*:*:*:*:*:*"],"package":{"name":"cjson","version":"1.7.19-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-67217","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-67217","cwe":"CWE-696","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-67217","date":"2026-10-09","epss":0.00433,"percentile":0.35612}],"risk":0.24031499999999997,"urls":["https://github.com/DaveGamble/cJSON/blob/v1.7.19/cJSON_Utils.c#L887-L948","https://joshua.hu/cjson-json-parser-cve-vulnerabilities","https://www.vulncheck.com/advisories/cjson-json-patch-non-atomic-application-destroys-data-before-validation"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-67217","description":"cJSON through 1.7.19 applies RFC 6902 JSON Patch operations non-atomically in apply_patch() in cJSON_Utils.c. For a replace operation that is missing its value member, or a move operation whose destination path cannot be resolved, the existing target member is detached and deleted before the operation is fully validated, so the target document is mutated while cJSONUtils_ApplyPatches() or cJSONUtils_ApplyPatchesCaseSensitive() returns a failure status. An attacker who can supply the patch document can destroy addressable members of the target document even though the API reports that the patch failed, defeating the all-or-nothing behavior callers rely on to reject bad patches."},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106221","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106221","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L","metrics":{"baseScore":8.3,"impactScore":5.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L","metrics":{"baseScore":8.3,"impactScore":5.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106221","cwe":"CWE-441","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106221","date":"2026-10-09","epss":0.00303,"percentile":0.21218}],"risk":0.23937000000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/540049672"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106221","description":"Confused deputy in WebAPKs in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106201","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106201","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106201","cwe":"CWE-362","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106201","date":"2026-10-09","epss":0.00287,"percentile":0.19484}],"risk":0.23390500000000006,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/517546096"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106201","description":"Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106393","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106393","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106393","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106393","date":"2026-10-09","epss":0.00296,"percentile":0.20469}],"risk":0.23384,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/559793873"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106393","description":"Use after free in Storage in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106238","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106238","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106238","cwe":"CWE-362","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106238","date":"2026-10-09","epss":0.00296,"percentile":0.20468}],"risk":0.23384,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/492374387"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106238","description":"Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106237","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106237","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L","metrics":{"baseScore":9.6,"impactScore":6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L","metrics":{"baseScore":9.6,"impactScore":6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106237","cwe":"CWE-200","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106237","date":"2026-10-09","epss":0.00246,"percentile":0.14605}],"risk":0.22878,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/553255283"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106237","description":"Information leak in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"9e813491f50ba632","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-65703","versionConstraint":">= 2.7, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-65703","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-65703","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-65703","date":"2026-10-09","epss":0.00292,"percentile":0.19957}],"risk":0.22849,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/fd3ee52fab34d98a95b787d0b5ff45685766200c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23773","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-tdsc-video-decoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-65703","description":"FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video decoder that allows remote attackers to cause heap corruption by supplying a crafted AVI file that changes frame dimensions across TDSF frames. The tdsc_parse_tdsf() function fails to unreference the existing reference frame before calling av_frame_get_buffer(), causing tdsc_blit() and tdsc_yuv2rgb() to write attacker-controlled pixel data beyond the end of the undersized reference frame buffer, resulting in a process crash and potential code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"d07d7332fd90e2f5","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-65703","versionConstraint":">= 2.7, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-65703","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-65703","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-65703","date":"2026-10-09","epss":0.00292,"percentile":0.19957}],"risk":0.22849,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/fd3ee52fab34d98a95b787d0b5ff45685766200c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23773","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-tdsc-video-decoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-65703","description":"FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video decoder that allows remote attackers to cause heap corruption by supplying a crafted AVI file that changes frame dimensions across TDSF frames. The tdsc_parse_tdsf() function fails to unreference the existing reference frame before calling av_frame_get_buffer(), causing tdsc_blit() and tdsc_yuv2rgb() to write attacker-controlled pixel data beyond the end of the undersized reference frame buffer, resulting in a process crash and potential code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"50075ec0b9beb4e7","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-65703","versionConstraint":">= 2.7, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-65703","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-65703","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-65703","date":"2026-10-09","epss":0.00292,"percentile":0.19957}],"risk":0.22849,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/fd3ee52fab34d98a95b787d0b5ff45685766200c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23773","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-tdsc-video-decoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-65703","description":"FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video decoder that allows remote attackers to cause heap corruption by supplying a crafted AVI file that changes frame dimensions across TDSF frames. The tdsc_parse_tdsf() function fails to unreference the existing reference frame before calling av_frame_get_buffer(), causing tdsc_blit() and tdsc_yuv2rgb() to write attacker-controlled pixel data beyond the end of the undersized reference frame buffer, resulting in a process crash and potential code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"15f575ddc365a154","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-65703","versionConstraint":">= 2.7, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-65703","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-65703","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-65703","date":"2026-10-09","epss":0.00292,"percentile":0.19957}],"risk":0.22849,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/fd3ee52fab34d98a95b787d0b5ff45685766200c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23773","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-tdsc-video-decoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-65703","description":"FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video decoder that allows remote attackers to cause heap corruption by supplying a crafted AVI file that changes frame dimensions across TDSF frames. The tdsc_parse_tdsf() function fails to unreference the existing reference frame before calling av_frame_get_buffer(), causing tdsc_blit() and tdsc_yuv2rgb() to write attacker-controlled pixel data beyond the end of the undersized reference frame buffer, resulting in a process crash and potential code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106205","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106205","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106205","cwe":"CWE-862","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106205","date":"2026-10-09","epss":0.00291,"percentile":0.19877}],"risk":0.22698,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/519499907"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106205","description":"Missing authorization in Passwords in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87433","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87433","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87433","cwe":"CWE-367","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87433","date":"2026-10-09","epss":0.00278,"percentile":0.18568}],"risk":0.22657000000000002,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/497574154"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87433","description":"Race condition in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106274","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106274","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106274","cwe":"CWE-706","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106274","date":"2026-10-09","epss":0.00276,"percentile":0.18381}],"risk":0.22494,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/497842821"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106274","description":"Incorrect reference resolution in Browser in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106308","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106308","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106308","cwe":"CWE-706","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106308","date":"2026-10-09","epss":0.00276,"percentile":0.18381}],"risk":0.22494,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/560055258"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106308","description":"Incorrect reference resolution in Autofill in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"5b157b98b5ac0132","cpes":["cpe:2.3:a:golang:networking:v0.57.0:*:*:*:*:go:*:*","cpe:2.3:a:golang:net:v0.57.0:*:*:*:*:go:*:*"],"name":"golang.org/x/net","purl":"pkg:golang/golang.org/x/net@v0.57.0","type":"go-module","version":"v0.57.0","language":"go","licenses":[],"metadata":{"h1Digest":"h1:K5+3DljvIuDG9/Jv9rvyMywYNFCQ9RSUY6OOTTkT+tE=","mainModule":"k6","architecture":"amd64","goCompiledVersion":"go1.26.6"},"locations":[{"path":"/usr/libexec/sm-k6/k6-v1","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/usr/libexec/sm-k6/k6-v1","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.60.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6612","versionConstraint":"<0.60.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/net","version":"v0.57.0"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6612","fix":{"state":"fixed","versions":["0.60.0"],"available":[{"date":"2026-10-08","kind":"release","version":"0.60.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78663","cwe":"CWE-675","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78663","date":"2026-10-09","epss":0.00248,"percentile":0.14768}],"risk":0.22444,"urls":["https://go.dev/cl/847310","https://go.dev/issue/81743","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs"],"severity":"Critical","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847187","description":"The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configured connection-level flow control limit (MaxReceiveBufferPerConnection). Total buffered data is still limited by the concurrent stream limit and stream-level flow control."},"relatedVulnerabilities":[{"id":"CVE-2026-78663","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78663","cwe":"CWE-675","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78663","date":"2026-10-09","epss":0.00248,"percentile":0.14768}],"urls":["https://go.dev/cl/847187","https://go.dev/cl/847310","https://go.dev/issue/81743","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6612"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78663","description":"The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configured connection-level flow control limit (MaxReceiveBufferPerConnection). Total buffered data is still limited by the concurrent stream limit and stream-level flow control."}]},{"artifact":{"id":"035636176708beac","cpes":["cpe:2.3:a:golang:networking:v0.58.0:*:*:*:*:go:*:*","cpe:2.3:a:golang:net:v0.58.0:*:*:*:*:go:*:*"],"name":"golang.org/x/net","purl":"pkg:golang/golang.org/x/net@v0.58.0","type":"go-module","version":"v0.58.0","language":"go","licenses":[],"metadata":{"h1Digest":"h1:ynWG7rqYi4ccpTEuPZ2QGWHktVEM9DMCj9yzDE0Q7To=","mainModule":"k6","architecture":"amd64","goCompiledVersion":"go1.26.7"},"locations":[{"path":"/usr/libexec/sm-k6/k6-v2","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/usr/libexec/sm-k6/k6-v2","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.60.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6612","versionConstraint":"<0.60.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/net","version":"v0.58.0"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6612","fix":{"state":"fixed","versions":["0.60.0"],"available":[{"date":"2026-10-08","kind":"release","version":"0.60.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78663","cwe":"CWE-675","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78663","date":"2026-10-09","epss":0.00248,"percentile":0.14768}],"risk":0.22444,"urls":["https://go.dev/cl/847310","https://go.dev/issue/81743","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs"],"severity":"Critical","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847187","description":"The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configured connection-level flow control limit (MaxReceiveBufferPerConnection). Total buffered data is still limited by the concurrent stream limit and stream-level flow control."},"relatedVulnerabilities":[{"id":"CVE-2026-78663","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78663","cwe":"CWE-675","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78663","date":"2026-10-09","epss":0.00248,"percentile":0.14768}],"urls":["https://go.dev/cl/847187","https://go.dev/cl/847310","https://go.dev/issue/81743","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6612"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78663","description":"The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configured connection-level flow control limit (MaxReceiveBufferPerConnection). Total buffered data is still limited by the concurrent stream limit and stream-level flow control."}]},{"artifact":{"id":"178f5d911424f514","cpes":["cpe:2.3:a:golang:networking:v0.59.0:*:*:*:*:go:*:*","cpe:2.3:a:golang:net:v0.59.0:*:*:*:*:go:*:*"],"name":"golang.org/x/net","purl":"pkg:golang/golang.org/x/net@v0.59.0","type":"go-module","version":"v0.59.0","language":"go","licenses":[],"metadata":{"h1Digest":"h1:5zfYln+w5XCxwrnMMJPufRgNoXEaGxl0wo5GqPXyues=","mainModule":"github.com/grafana/synthetic-monitoring-agent","architecture":"amd64","goCompiledVersion":"go1.26.7"},"locations":[{"path":"/usr/local/bin/synthetic-monitoring-agent","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/usr/local/bin/synthetic-monitoring-agent","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.60.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6612","versionConstraint":"<0.60.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/net","version":"v0.59.0"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6612","fix":{"state":"fixed","versions":["0.60.0"],"available":[{"date":"2026-10-08","kind":"release","version":"0.60.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78663","cwe":"CWE-675","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78663","date":"2026-10-09","epss":0.00248,"percentile":0.14768}],"risk":0.22444,"urls":["https://go.dev/cl/847310","https://go.dev/issue/81743","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs"],"severity":"Critical","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847187","description":"The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configured connection-level flow control limit (MaxReceiveBufferPerConnection). Total buffered data is still limited by the concurrent stream limit and stream-level flow control."},"relatedVulnerabilities":[{"id":"CVE-2026-78663","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78663","cwe":"CWE-675","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78663","date":"2026-10-09","epss":0.00248,"percentile":0.14768}],"urls":["https://go.dev/cl/847187","https://go.dev/cl/847310","https://go.dev/issue/81743","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6612"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78663","description":"The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configured connection-level flow control limit (MaxReceiveBufferPerConnection). Total buffered data is still limited by the concurrent stream limit and stream-level flow control."}]},{"artifact":{"id":"233a0e4c47ab9bff","cpes":["cpe:2.3:a:golang:go:1.26.6:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.26.6","type":"go-module","version":"go1.26.6","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.26.6"},"locations":[{"path":"/usr/libexec/sm-k6/k6-v1","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/usr/libexec/sm-k6/k6-v1","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.26.9"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6612","versionConstraint":"<1.26.9 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.26.6"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6612","fix":{"state":"fixed","versions":["1.26.9"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78663","cwe":"CWE-675","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78663","date":"2026-10-09","epss":0.00248,"percentile":0.14768}],"risk":0.22444,"urls":["https://go.dev/cl/847310","https://go.dev/issue/81743","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs"],"severity":"Critical","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847187","description":"The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configured connection-level flow control limit (MaxReceiveBufferPerConnection). Total buffered data is still limited by the concurrent stream limit and stream-level flow control."},"relatedVulnerabilities":[{"id":"CVE-2026-78663","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78663","cwe":"CWE-675","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78663","date":"2026-10-09","epss":0.00248,"percentile":0.14768}],"urls":["https://go.dev/cl/847187","https://go.dev/cl/847310","https://go.dev/issue/81743","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6612"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78663","description":"The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configured connection-level flow control limit (MaxReceiveBufferPerConnection). Total buffered data is still limited by the concurrent stream limit and stream-level flow control."}]},{"artifact":{"id":"fe444b5362ab73cd","cpes":["cpe:2.3:a:golang:go:1.26.7:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.26.7","type":"go-module","version":"go1.26.7","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.26.7"},"locations":[{"path":"/usr/local/bin/synthetic-monitoring-agent","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/usr/local/bin/synthetic-monitoring-agent","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.26.9"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6612","versionConstraint":"<1.26.9 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.26.7"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6612","fix":{"state":"fixed","versions":["1.26.9"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78663","cwe":"CWE-675","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78663","date":"2026-10-09","epss":0.00248,"percentile":0.14768}],"risk":0.22444,"urls":["https://go.dev/cl/847310","https://go.dev/issue/81743","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs"],"severity":"Critical","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847187","description":"The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configured connection-level flow control limit (MaxReceiveBufferPerConnection). Total buffered data is still limited by the concurrent stream limit and stream-level flow control."},"relatedVulnerabilities":[{"id":"CVE-2026-78663","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78663","cwe":"CWE-675","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78663","date":"2026-10-09","epss":0.00248,"percentile":0.14768}],"urls":["https://go.dev/cl/847187","https://go.dev/cl/847310","https://go.dev/issue/81743","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6612"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78663","description":"The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configured connection-level flow control limit (MaxReceiveBufferPerConnection). Total buffered data is still limited by the concurrent stream limit and stream-level flow control."}]},{"artifact":{"id":"7bc26ab97a58f111","cpes":["cpe:2.3:a:golang:go:1.26.7:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.26.7","type":"go-module","version":"go1.26.7","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.26.7"},"locations":[{"path":"/usr/libexec/sm-k6/k6-v2","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/usr/libexec/sm-k6/k6-v2","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.26.9"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6612","versionConstraint":"<1.26.9 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.26.7"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6612","fix":{"state":"fixed","versions":["1.26.9"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78663","cwe":"CWE-675","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78663","date":"2026-10-09","epss":0.00248,"percentile":0.14768}],"risk":0.22444,"urls":["https://go.dev/cl/847310","https://go.dev/issue/81743","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs"],"severity":"Critical","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847187","description":"The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configured connection-level flow control limit (MaxReceiveBufferPerConnection). Total buffered data is still limited by the concurrent stream limit and stream-level flow control."},"relatedVulnerabilities":[{"id":"CVE-2026-78663","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78663","cwe":"CWE-675","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78663","date":"2026-10-09","epss":0.00248,"percentile":0.14768}],"urls":["https://go.dev/cl/847187","https://go.dev/cl/847310","https://go.dev/issue/81743","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6612"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78663","description":"The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configured connection-level flow control limit (MaxReceiveBufferPerConnection). Total buffered data is still limited by the concurrent stream limit and stream-level flow control."}]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95326","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95326","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.4,"impactScore":5.9,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95326","cwe":"CWE-459","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95326","date":"2026-10-09","epss":0.00281,"percentile":0.18853}],"risk":0.223395,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/533041383"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95326","description":"Incomplete cleanup in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-102301","versionConstraint":"< 154.0.8037.92 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-102301","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102301","cwe":"CWE-787","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-102301","date":"2026-10-09","epss":0.0028,"percentile":0.18811}],"risk":0.2212,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01807488085.html","https://issues.chromium.org/issues/562004351"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102301","description":"Out of bounds write in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95280","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95280","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95280","cwe":"CWE-362","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95280","date":"2026-10-09","epss":0.00289,"percentile":0.19753}],"risk":0.21675000000000003,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/560406548"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95280","description":"Race condition in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87601","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87601","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87601","cwe":"CWE-362","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87601","date":"2026-10-09","epss":0.00289,"percentile":0.19722}],"risk":0.21675000000000003,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/541604100"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87601","description":"Race condition in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106409","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106409","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106409","cwe":"CWE-706","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106409","date":"2026-10-09","epss":0.00273,"percentile":0.18127}],"risk":0.21567,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/559097675"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106409","description":"Incorrect reference resolution in WebAppInstalls in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-102324","versionConstraint":"< 154.0.8037.92 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-102324","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102324","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-102324","date":"2026-10-09","epss":0.00269,"percentile":0.17516}],"risk":0.21251,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01807488085.html","https://issues.chromium.org/issues/562174487"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102324","description":"Use after free in PictureInPicture in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87505","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87505","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87505","cwe":"CWE-863","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87505","date":"2026-10-09","epss":0.00272,"percentile":0.18025}],"risk":0.21216000000000004,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/517597701"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87505","description":"Incorrect authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-91712","versionConstraint":"< 153.0.8010.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-91712","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91712","cwe":"CWE-367","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-91712","date":"2026-10-09","epss":0.00268,"percentile":0.17454}],"risk":0.21172000000000002,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0541751186.html","https://issues.chromium.org/issues/521486621"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91712","description":"Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95303","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95303","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95303","cwe":"CWE-459","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95303","date":"2026-10-09","epss":0.00366,"percentile":0.28413}],"risk":0.21045,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/517442714"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95303","description":"Incomplete cleanup in SmartCard in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87549","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87549","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87549","cwe":"CWE-459","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87549","date":"2026-10-09","epss":0.00365,"percentile":0.28356}],"risk":0.20987499999999998,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/516534546"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87549","description":"Incomplete cleanup in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106189","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106189","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106189","cwe":"CWE-94","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106189","date":"2026-10-09","epss":0.00283,"percentile":0.19141}],"risk":0.20942,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/502034469"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106189","description":"Code injection in ReaderMode in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106256","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106256","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106256","cwe":"CWE-200","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106256","date":"2026-10-09","epss":0.00253,"percentile":0.15433}],"risk":0.20619500000000004,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/553335319"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106256","description":"Information leak in Passwords in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106198","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106198","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N","metrics":{"baseScore":8.2,"impactScore":4.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N","metrics":{"baseScore":8.2,"impactScore":4.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106198","cwe":"CWE-862","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106198","date":"2026-10-09","epss":0.00261,"percentile":0.165}],"risk":0.20488499999999996,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/510773353"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106198","description":"Missing authorization in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-102327","versionConstraint":"< 154.0.8037.92 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-102327","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102327","cwe":"CWE-863","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-102327","date":"2026-10-09","epss":0.00273,"percentile":0.18142}],"risk":0.20475,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01807488085.html","https://issues.chromium.org/issues/496212975"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102327","description":"Incorrect authorization in WebView in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106377","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106377","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106377","cwe":"CWE-362","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106377","date":"2026-10-09","epss":0.00258,"percentile":0.16052}],"risk":0.20382,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/520179149"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106377","description":"Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"5072120da1bad992","cpes":["cpe:2.3:a:DaveGamble:cjson:1.7.19-r1:*:*:*:*:*:*:*","cpe:2.3:a:cjson:cjson:1.7.19-r1:*:*:*:*:*:*:*"],"name":"cjson","purl":"pkg:apk/alpine/cjson@1.7.19-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"1.7.19-r1","language":"","licenses":["MIT"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcjson.so.1"},{"path":"/usr/lib/libcjson.so.1.7.19"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"cjson"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:davegamble:cjson:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-16554","versionConstraint":"= 1.7.19 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:DaveGamble:cjson:1.7.19:*:*:*:*:*:*:*"],"package":{"name":"cjson","version":"1.7.19-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-16554","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cvd@cert.pl","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-16554","cwe":"CWE-190","type":"Secondary","source":"cvd@cert.pl"}],"epss":[{"cve":"CVE-2026-16554","date":"2026-10-09","epss":0.00291,"percentile":0.19935}],"risk":0.2029725,"urls":["https://cert.pl/en/posts/2026/07/CVE-2026-16554","https://github.com/DaveGamble/cJSON","http://www.openwall.com/lists/oss-security/2026/07/30/26","http://www.openwall.com/lists/oss-security/2026/07/31/4"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-16554","description":"cJSON library is vulnerable to an integer overflow in the print_string_ptr() function in cJSON.c on 32-bit platforms. The escape_characters counter, a 32-bit size_t, can wrap around when processing strings containing approximately 858,993,460 or more control characters, causing the output buffer to be allocated based on an underestimated length. When cJSON_PrintBuffered() is used with a pre-allocated buffer, the subsequent write loop overflows the heap allocation. An attacker supplying a crafted JSON string to an application using cJSON on a 32-bit platform can cause a heap buffer overflow, potentially leading to remote code execution, information disclosure, or denial of service.\n\n\n\n\nBecause project creator contact attempts were unsuccessful, the vulnerability has only been confirmed in version 1.7.19 but may also affect other versions."},"relatedVulnerabilities":[]},{"artifact":{"id":"c1fed726b9e0ccb7","cpes":["cpe:2.3:a:libcrypto3:libcrypto3:3.5.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto3:libcrypto:3.5.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto3:3.5.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto:3.5.8-r0:*:*:*:*:*:*:*"],"name":"libcrypto3","purl":"pkg:apk/alpine/libcrypto3@3.5.8-r0?arch=x86_64&distro=alpine-3.24.2&upstream=openssl","type":"apk","version":"3.5.8-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/ssl"},{"path":"/etc/ssl/ct_log_list.cnf"},{"path":"/etc/ssl/ct_log_list.cnf.dist"},{"path":"/etc/ssl/openssl.cnf"},{"path":"/etc/ssl/openssl.cnf.dist"},{"path":"/etc/ssl/certs"},{"path":"/etc/ssl/private"},{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcrypto.so.3"},{"path":"/usr/lib/engines-3"},{"path":"/usr/lib/engines-3/afalg.so"},{"path":"/usr/lib/engines-3/capi.so"},{"path":"/usr/lib/engines-3/loader_attic.so"},{"path":"/usr/lib/engines-3/padlock.so"},{"path":"/usr/lib/ossl-modules"},{"path":"/usr/lib/ossl-modules/legacy.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-72897","versionConstraint":">= 3.4.0, < 3.4.8||>= 3.5.0, < 3.5.9||>= 3.6.0, < 3.6.5||>= 4.0.0, < 4.0.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.5.8:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.5.8-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-72897","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-72897","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-72897","date":"2026-10-09","epss":0.00266,"percentile":0.16966}],"risk":0.1995,"urls":["https://github.com/openssl/openssl/commit/00646e5085a0d12d29e0d2f9b9bc5f7111a50922","https://github.com/openssl/openssl/commit/4135f553c9d3ba4a09fe752f5d30af2a6a092b2e","https://github.com/openssl/openssl/commit/9c54d209486f6b1ad79fe2179c40f13200fa4f61","https://github.com/openssl/openssl/commit/e87ed26b298a74d8ba61a53e9c7bcd1acac6b814","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-72897","description":"Issue summary: A TLS server that calls SSL_set_SSL_CTX() to switch a\nconnection to a different SSL_CTX part way through a handshake may access\nmemory beyond the end of an internal array if the replacement context knows\nabout more provider signature algorithms than the context the connection was\ncreated from. Applications which never call SSL_set_SSL_CTX() are not\naffected.\n\nImpact summary: A remote peer may be able to cause a small out-of-bounds\nread, and in some circumstances a fixed-value out-of-bounds write, on the\nserver heap. This may lead to a Denial of Service.\n\nCWE: CWE-787: Out-of-bounds Write\n\nDescription: A TLS connection records how many certificate slots it has\nwhen it is created, taken from the SSL_CTX that created it: the built-in\ncertificate types plus one slot for each provider TLS-SIGALG entry that\ncontext was aware of. That count sizes an internal array of per-slot\ncertificate validity flags.\n\nAn application may replace a connection's SSL_CTX part way through the\nhandshake by calling SSL_set_SSL_CTX(), most commonly from a servername\ncallback in order to serve a different virtual host. Doing so did not\nrefresh the recorded count. A provider signature algorithm's slot index is\nits position in the list of whichever context resolves it, so if the\nreplacement context is aware of more of them than the original, an\nalgorithm offered by the peer can resolve to an index beyond the end of the\narray. Processing the peer's signature algorithms then reads one four byte\nword past the end for each such algorithm and, where the word read is zero,\nwrites a fixed value over it. A peer offering many of them can corrupt heap\nmetadata and abort the process.\n\nOnly provider signature algorithms which occupy one of the excess slots,\nand which the server also has configured, have this effect. Codepoints the\nreplacement context does not recognise are discarded without being resolved\nto a slot, and provider signature algorithms are usable only from TLS 1.3.\n\nThe two contexts must therefore be aware of different numbers of provider\nsignature algorithms, which requires separate library contexts, a provider\nloaded between the two being created, or providers which differ in what\nthey advertise - in 4.0, for example, the default provider advertises SM2\nwhere the FIPS provider does not. A deployment meeting the condition is\nalso unable to negotiate the affected algorithms with legitimate clients,\nsince the same stale count hides the corresponding certificates, so the\nmisconfiguration is likely to be noticed. For that reason, and because the\nconfiguration is not the default, this issue has been assessed as Low\nseverity.\n\nFIPS impact: no\nNo FIPS modules are affected by this issue as the affected code is outside\nthe OpenSSL FIPS module boundary."},"relatedVulnerabilities":[]},{"artifact":{"id":"269544be9368a131","cpes":["cpe:2.3:a:libssl3:libssl3:3.5.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl3:libssl:3.5.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl3:3.5.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl:3.5.8-r0:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:apk/alpine/libssl3@3.5.8-r0?arch=x86_64&distro=alpine-3.24.2&upstream=openssl","type":"apk","version":"3.5.8-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libssl.so.3"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-72897","versionConstraint":">= 3.4.0, < 3.4.8||>= 3.5.0, < 3.5.9||>= 3.6.0, < 3.6.5||>= 4.0.0, < 4.0.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.5.8:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.5.8-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-72897","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-72897","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-72897","date":"2026-10-09","epss":0.00266,"percentile":0.16966}],"risk":0.1995,"urls":["https://github.com/openssl/openssl/commit/00646e5085a0d12d29e0d2f9b9bc5f7111a50922","https://github.com/openssl/openssl/commit/4135f553c9d3ba4a09fe752f5d30af2a6a092b2e","https://github.com/openssl/openssl/commit/9c54d209486f6b1ad79fe2179c40f13200fa4f61","https://github.com/openssl/openssl/commit/e87ed26b298a74d8ba61a53e9c7bcd1acac6b814","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-72897","description":"Issue summary: A TLS server that calls SSL_set_SSL_CTX() to switch a\nconnection to a different SSL_CTX part way through a handshake may access\nmemory beyond the end of an internal array if the replacement context knows\nabout more provider signature algorithms than the context the connection was\ncreated from. Applications which never call SSL_set_SSL_CTX() are not\naffected.\n\nImpact summary: A remote peer may be able to cause a small out-of-bounds\nread, and in some circumstances a fixed-value out-of-bounds write, on the\nserver heap. This may lead to a Denial of Service.\n\nCWE: CWE-787: Out-of-bounds Write\n\nDescription: A TLS connection records how many certificate slots it has\nwhen it is created, taken from the SSL_CTX that created it: the built-in\ncertificate types plus one slot for each provider TLS-SIGALG entry that\ncontext was aware of. That count sizes an internal array of per-slot\ncertificate validity flags.\n\nAn application may replace a connection's SSL_CTX part way through the\nhandshake by calling SSL_set_SSL_CTX(), most commonly from a servername\ncallback in order to serve a different virtual host. Doing so did not\nrefresh the recorded count. A provider signature algorithm's slot index is\nits position in the list of whichever context resolves it, so if the\nreplacement context is aware of more of them than the original, an\nalgorithm offered by the peer can resolve to an index beyond the end of the\narray. Processing the peer's signature algorithms then reads one four byte\nword past the end for each such algorithm and, where the word read is zero,\nwrites a fixed value over it. A peer offering many of them can corrupt heap\nmetadata and abort the process.\n\nOnly provider signature algorithms which occupy one of the excess slots,\nand which the server also has configured, have this effect. Codepoints the\nreplacement context does not recognise are discarded without being resolved\nto a slot, and provider signature algorithms are usable only from TLS 1.3.\n\nThe two contexts must therefore be aware of different numbers of provider\nsignature algorithms, which requires separate library contexts, a provider\nloaded between the two being created, or providers which differ in what\nthey advertise - in 4.0, for example, the default provider advertises SM2\nwhere the FIPS provider does not. A deployment meeting the condition is\nalso unable to negotiate the affected algorithms with legitimate clients,\nsince the same stale count hides the corresponding certificates, so the\nmisconfiguration is likely to be noticed. For that reason, and because the\nconfiguration is not the default, this issue has been assessed as Low\nseverity.\n\nFIPS impact: no\nNo FIPS modules are affected by this issue as the affected code is outside\nthe OpenSSL FIPS module boundary."},"relatedVulnerabilities":[]},{"artifact":{"id":"c1fed726b9e0ccb7","cpes":["cpe:2.3:a:libcrypto3:libcrypto3:3.5.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto3:libcrypto:3.5.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto3:3.5.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto:3.5.8-r0:*:*:*:*:*:*:*"],"name":"libcrypto3","purl":"pkg:apk/alpine/libcrypto3@3.5.8-r0?arch=x86_64&distro=alpine-3.24.2&upstream=openssl","type":"apk","version":"3.5.8-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/ssl"},{"path":"/etc/ssl/ct_log_list.cnf"},{"path":"/etc/ssl/ct_log_list.cnf.dist"},{"path":"/etc/ssl/openssl.cnf"},{"path":"/etc/ssl/openssl.cnf.dist"},{"path":"/etc/ssl/certs"},{"path":"/etc/ssl/private"},{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcrypto.so.3"},{"path":"/usr/lib/engines-3"},{"path":"/usr/lib/engines-3/afalg.so"},{"path":"/usr/lib/engines-3/capi.so"},{"path":"/usr/lib/engines-3/loader_attic.so"},{"path":"/usr/lib/engines-3/padlock.so"},{"path":"/usr/lib/ossl-modules"},{"path":"/usr/lib/ossl-modules/legacy.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-75806","versionConstraint":">= 1.1.1, < 1.1.1zj||>= 3.0.0, < 3.0.23||>= 3.4.0, < 3.4.8||>= 3.5.0, < 3.5.9||>= 3.6.0, < 3.6.5||>= 4.0.0, < 4.0.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.5.8:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.5.8-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-75806","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-75806","cwe":"CWE-1284","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-75806","date":"2026-10-09","epss":0.00387,"percentile":0.30686}],"risk":0.199305,"urls":["https://github.com/openssl/openssl/commit/04728a289a823e68137f88da016cb9ede307217d","https://github.com/openssl/openssl/commit/050b275cd671a6eed1d6457642d41a5a77aab972","https://github.com/openssl/openssl/commit/3a4589d015a9049d47b66f186cf50a8711343a1d","https://github.com/openssl/openssl/commit/5af82fefbaf2b5fec2fc0e1d87f112844902f01d","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-75806","description":"Issue summary: An established DTLS 1.2 association using an AEAD cipher suite\ncan be terminated by a single unauthenticated datagram whose encrypted\nfragment is shorter than the mandatory explicit IV and authentication tag\noverhead.\n\nImpact summary: An attacker who can send a datagram that is routed to an\nexisting DTLS 1.2 association can tear that association down without knowing\nany key material. This is a Denial of Service limited to the targeted\nassociation. There is no memory safety or confidentiality impact.\n\nCWE: CWE-1284: Improper Validation of Specified Quantity in Input\n\nDescription: In TLS 1.2 and DTLS 1.2 every record protected by an AEAD cipher\nsuite carries an explicit IV followed by the ciphertext and an authentication\ntag. When decrypting such a record the record layer passed the record length to\nthe cipher implementation before checking that the record was long enough to\ncontain the explicit IV and the tag. For a record shorter than that overhead the\ncipher implementation rejected the impossible length, and the record layer\ntreated this as an internal failure and raised a fatal internal_error alert\ninstead of treating the record as one that failed authentication.\n\nIn TLS 1.2 the same record causes a fatal internal_error alert instead of the\nexpected bad_record_mac alert. Since any undecryptable record already\nterminates a TLS connection, this is a protocol conformance issue rather than\na security issue in TLS.\n\nThe fix validates the record length against the explicit IV and tag length\nbefore any AEAD processing, so that TLS reports bad_record_mac and DTLS\nsilently discards the record.\n\nFIPS impact: no\nThe affected code is outside the FIPS module boundary."},"relatedVulnerabilities":[]},{"artifact":{"id":"269544be9368a131","cpes":["cpe:2.3:a:libssl3:libssl3:3.5.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl3:libssl:3.5.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl3:3.5.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl:3.5.8-r0:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:apk/alpine/libssl3@3.5.8-r0?arch=x86_64&distro=alpine-3.24.2&upstream=openssl","type":"apk","version":"3.5.8-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libssl.so.3"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-75806","versionConstraint":">= 1.1.1, < 1.1.1zj||>= 3.0.0, < 3.0.23||>= 3.4.0, < 3.4.8||>= 3.5.0, < 3.5.9||>= 3.6.0, < 3.6.5||>= 4.0.0, < 4.0.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.5.8:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.5.8-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-75806","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-75806","cwe":"CWE-1284","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-75806","date":"2026-10-09","epss":0.00387,"percentile":0.30686}],"risk":0.199305,"urls":["https://github.com/openssl/openssl/commit/04728a289a823e68137f88da016cb9ede307217d","https://github.com/openssl/openssl/commit/050b275cd671a6eed1d6457642d41a5a77aab972","https://github.com/openssl/openssl/commit/3a4589d015a9049d47b66f186cf50a8711343a1d","https://github.com/openssl/openssl/commit/5af82fefbaf2b5fec2fc0e1d87f112844902f01d","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-75806","description":"Issue summary: An established DTLS 1.2 association using an AEAD cipher suite\ncan be terminated by a single unauthenticated datagram whose encrypted\nfragment is shorter than the mandatory explicit IV and authentication tag\noverhead.\n\nImpact summary: An attacker who can send a datagram that is routed to an\nexisting DTLS 1.2 association can tear that association down without knowing\nany key material. This is a Denial of Service limited to the targeted\nassociation. There is no memory safety or confidentiality impact.\n\nCWE: CWE-1284: Improper Validation of Specified Quantity in Input\n\nDescription: In TLS 1.2 and DTLS 1.2 every record protected by an AEAD cipher\nsuite carries an explicit IV followed by the ciphertext and an authentication\ntag. When decrypting such a record the record layer passed the record length to\nthe cipher implementation before checking that the record was long enough to\ncontain the explicit IV and the tag. For a record shorter than that overhead the\ncipher implementation rejected the impossible length, and the record layer\ntreated this as an internal failure and raised a fatal internal_error alert\ninstead of treating the record as one that failed authentication.\n\nIn TLS 1.2 the same record causes a fatal internal_error alert instead of the\nexpected bad_record_mac alert. Since any undecryptable record already\nterminates a TLS connection, this is a protocol conformance issue rather than\na security issue in TLS.\n\nThe fix validates the record length against the explicit IV and tag length\nbefore any AEAD processing, so that TLS reports bad_record_mac and DTLS\nsilently discards the record.\n\nFIPS impact: no\nThe affected code is outside the FIPS module boundary."},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-91743","versionConstraint":"< 153.0.8010.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-91743","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91743","cwe":"CWE-367","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-91743","date":"2026-10-09","epss":0.00252,"percentile":0.15333}],"risk":0.19908,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0541751186.html","https://issues.chromium.org/issues/516947138"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91743","description":"Race condition in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106334","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106334","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106334","cwe":"CWE-200","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106334","date":"2026-10-09","epss":0.00244,"percentile":0.14355}],"risk":0.19886,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/556229780"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106334","description":"Information leak in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"9e813491f50ba632","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66037","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66037","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66037","cwe":"CWE-770","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66037","date":"2026-10-09","epss":0.00349,"percentile":0.26485}],"risk":0.19834833333333335,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/86708357d126af84c16f80d9c57335d1e8c845c5","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23627","https://www.vulncheck.com/advisories/ffmpeg-iamf-demuxer-uncontrolled-resource-consumption-via-mix-presentation-obu"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66037","description":"FFmpeg through 8.1.2, fixed in commit 5d7112c, contains an uncontrolled resource consumption vulnerability in the IAMF demuxer that allows an unauthenticated attacker to cause multi-gigabyte memory allocation from a 17-byte input file by supplying a crafted count_label field. The mix_presentation_obu() function in libavformat/iamf_parse.c calls av_calloc(count_label, sizeof(*language_label)) with an attacker-controlled value before validating available OBU data, enabling an allocation amplification of approximately 126 million bytes per input byte that exhausts process memory or triggers an OOM-kill during format probing."},"relatedVulnerabilities":[]},{"artifact":{"id":"d07d7332fd90e2f5","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66037","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66037","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66037","cwe":"CWE-770","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66037","date":"2026-10-09","epss":0.00349,"percentile":0.26485}],"risk":0.19834833333333335,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/86708357d126af84c16f80d9c57335d1e8c845c5","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23627","https://www.vulncheck.com/advisories/ffmpeg-iamf-demuxer-uncontrolled-resource-consumption-via-mix-presentation-obu"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66037","description":"FFmpeg through 8.1.2, fixed in commit 5d7112c, contains an uncontrolled resource consumption vulnerability in the IAMF demuxer that allows an unauthenticated attacker to cause multi-gigabyte memory allocation from a 17-byte input file by supplying a crafted count_label field. The mix_presentation_obu() function in libavformat/iamf_parse.c calls av_calloc(count_label, sizeof(*language_label)) with an attacker-controlled value before validating available OBU data, enabling an allocation amplification of approximately 126 million bytes per input byte that exhausts process memory or triggers an OOM-kill during format probing."},"relatedVulnerabilities":[]},{"artifact":{"id":"50075ec0b9beb4e7","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66037","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66037","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66037","cwe":"CWE-770","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66037","date":"2026-10-09","epss":0.00349,"percentile":0.26485}],"risk":0.19834833333333335,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/86708357d126af84c16f80d9c57335d1e8c845c5","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23627","https://www.vulncheck.com/advisories/ffmpeg-iamf-demuxer-uncontrolled-resource-consumption-via-mix-presentation-obu"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66037","description":"FFmpeg through 8.1.2, fixed in commit 5d7112c, contains an uncontrolled resource consumption vulnerability in the IAMF demuxer that allows an unauthenticated attacker to cause multi-gigabyte memory allocation from a 17-byte input file by supplying a crafted count_label field. The mix_presentation_obu() function in libavformat/iamf_parse.c calls av_calloc(count_label, sizeof(*language_label)) with an attacker-controlled value before validating available OBU data, enabling an allocation amplification of approximately 126 million bytes per input byte that exhausts process memory or triggers an OOM-kill during format probing."},"relatedVulnerabilities":[]},{"artifact":{"id":"15f575ddc365a154","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-66037","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-66037","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66037","cwe":"CWE-770","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66037","date":"2026-10-09","epss":0.00349,"percentile":0.26485}],"risk":0.19834833333333335,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/86708357d126af84c16f80d9c57335d1e8c845c5","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23627","https://www.vulncheck.com/advisories/ffmpeg-iamf-demuxer-uncontrolled-resource-consumption-via-mix-presentation-obu"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66037","description":"FFmpeg through 8.1.2, fixed in commit 5d7112c, contains an uncontrolled resource consumption vulnerability in the IAMF demuxer that allows an unauthenticated attacker to cause multi-gigabyte memory allocation from a 17-byte input file by supplying a crafted count_label field. The mix_presentation_obu() function in libavformat/iamf_parse.c calls av_calloc(count_label, sizeof(*language_label)) with an attacker-controlled value before validating available OBU data, enabling an allocation amplification of approximately 126 million bytes per input byte that exhausts process memory or triggers an OOM-kill during format probing."},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106249","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106249","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106249","cwe":"CWE-863","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106249","date":"2026-10-09","epss":0.00243,"percentile":0.14291}],"risk":0.198045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/552440317"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106249","description":"Incorrect authorization in Autofill in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106371","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106371","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106371","cwe":"CWE-863","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106371","date":"2026-10-09","epss":0.00243,"percentile":0.14291}],"risk":0.198045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/553326010"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106371","description":"Incorrect authorization in Transactions Platform in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106309","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106309","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106309","cwe":"CWE-863","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106309","date":"2026-10-09","epss":0.00243,"percentile":0.14261}],"risk":0.198045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/503708636"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106309","description":"Incorrect authorization in Selection in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106314","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106314","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106314","cwe":"CWE-863","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106314","date":"2026-10-09","epss":0.00243,"percentile":0.14261}],"risk":0.198045,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/501533684"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106314","description":"Incorrect authorization in Bluetooth in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"233a0e4c47ab9bff","cpes":["cpe:2.3:a:golang:go:1.26.6:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.26.6","type":"go-module","version":"go1.26.6","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.26.6"},"locations":[{"path":"/usr/libexec/sm-k6/k6-v1","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/usr/libexec/sm-k6/k6-v1","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.26.9"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6604","versionConstraint":"<1.26.9||>=1.27.0-0,<1.27.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.26.6"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6604","fix":{"state":"fixed","versions":["1.26.9","1.27.2"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"},{"date":"2026-10-08","kind":"release","version":"1.27.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56857","cwe":"CWE-1386","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-56857","date":"2026-10-09","epss":0.0021,"percentile":0.10367}],"risk":0.19740000000000002,"urls":["https://go.dev/issue/81739","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"],"severity":"Critical","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847305","description":"On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation can create a directory at the junction target even when that target is located outside the root. This only applies to operations where the last path component is a junction (path/to/junction, but not path/junction/target)."},"relatedVulnerabilities":[{"id":"CVE-2026-56857","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56857","cwe":"CWE-1386","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-56857","date":"2026-10-09","epss":0.0021,"percentile":0.10367}],"urls":["https://go.dev/cl/847305","https://go.dev/issue/81739","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6604"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56857","description":"On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation can create a directory at the junction target even when that target is located outside the root. This only applies to operations where the last path component is a junction (path/to/junction, but not path/junction/target)."}]},{"artifact":{"id":"7bc26ab97a58f111","cpes":["cpe:2.3:a:golang:go:1.26.7:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.26.7","type":"go-module","version":"go1.26.7","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.26.7"},"locations":[{"path":"/usr/libexec/sm-k6/k6-v2","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/usr/libexec/sm-k6/k6-v2","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.26.9"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6604","versionConstraint":"<1.26.9||>=1.27.0-0,<1.27.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.26.7"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6604","fix":{"state":"fixed","versions":["1.26.9","1.27.2"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"},{"date":"2026-10-08","kind":"release","version":"1.27.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56857","cwe":"CWE-1386","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-56857","date":"2026-10-09","epss":0.0021,"percentile":0.10367}],"risk":0.19740000000000002,"urls":["https://go.dev/issue/81739","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"],"severity":"Critical","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847305","description":"On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation can create a directory at the junction target even when that target is located outside the root. This only applies to operations where the last path component is a junction (path/to/junction, but not path/junction/target)."},"relatedVulnerabilities":[{"id":"CVE-2026-56857","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56857","cwe":"CWE-1386","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-56857","date":"2026-10-09","epss":0.0021,"percentile":0.10367}],"urls":["https://go.dev/cl/847305","https://go.dev/issue/81739","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6604"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56857","description":"On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation can create a directory at the junction target even when that target is located outside the root. This only applies to operations where the last path component is a junction (path/to/junction, but not path/junction/target)."}]},{"artifact":{"id":"fe444b5362ab73cd","cpes":["cpe:2.3:a:golang:go:1.26.7:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.26.7","type":"go-module","version":"go1.26.7","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.26.7"},"locations":[{"path":"/usr/local/bin/synthetic-monitoring-agent","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/usr/local/bin/synthetic-monitoring-agent","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.26.9"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6604","versionConstraint":"<1.26.9||>=1.27.0-0,<1.27.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.26.7"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6604","fix":{"state":"fixed","versions":["1.26.9","1.27.2"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"},{"date":"2026-10-08","kind":"release","version":"1.27.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56857","cwe":"CWE-1386","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-56857","date":"2026-10-09","epss":0.0021,"percentile":0.10367}],"risk":0.19740000000000002,"urls":["https://go.dev/issue/81739","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"],"severity":"Critical","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847305","description":"On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation can create a directory at the junction target even when that target is located outside the root. This only applies to operations where the last path component is a junction (path/to/junction, but not path/junction/target)."},"relatedVulnerabilities":[{"id":"CVE-2026-56857","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56857","cwe":"CWE-1386","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-56857","date":"2026-10-09","epss":0.0021,"percentile":0.10367}],"urls":["https://go.dev/cl/847305","https://go.dev/issue/81739","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6604"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56857","description":"On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation can create a directory at the junction target even when that target is located outside the root. This only applies to operations where the last path component is a junction (path/to/junction, but not path/junction/target)."}]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106255","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106255","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106255","cwe":"CWE-362","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106255","date":"2026-10-09","epss":0.00242,"percentile":0.14109}],"risk":0.19723000000000002,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/559780376"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106255","description":"Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87535","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87535","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87535","cwe":"CWE-221","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87535","date":"2026-10-09","epss":0.0034,"percentile":0.25447}],"risk":0.19549999999999998,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/520572550"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87535","description":"Information loss or omission in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106199","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106199","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N","metrics":{"baseScore":8.2,"impactScore":4.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N","metrics":{"baseScore":8.2,"impactScore":4.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106199","cwe":"CWE-863","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106199","date":"2026-10-09","epss":0.00248,"percentile":0.14745}],"risk":0.19468,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/517703787"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106199","description":"Incorrect authorization in Actor in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially bypass site isolation via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87608","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87608","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87608","cwe":"CWE-295","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87608","date":"2026-10-09","epss":0.00259,"percentile":0.16153}],"risk":0.19424999999999998,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/540072282"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87608","description":"Improper certificate validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95275","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95275","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95275","cwe":"CWE-706","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95275","date":"2026-10-09","epss":0.00333,"percentile":0.24569}],"risk":0.19147499999999998,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/542926849"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95275","description":"Incorrect reference resolution in MediaStream in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106196","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106196","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L","metrics":{"baseScore":7.6,"impactScore":4.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L","metrics":{"baseScore":7.6,"impactScore":4.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106196","cwe":"CWE-862","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106196","date":"2026-10-09","epss":0.00251,"percentile":0.15152}],"risk":0.189505,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/504215649"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106196","description":"Missing authorization in Navigation in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106301","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106301","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106301","cwe":"CWE-441","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106301","date":"2026-10-09","epss":0.0024,"percentile":0.13911}],"risk":0.1872,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/523750306"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106301","description":"Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106412","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106412","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106412","cwe":"CWE-367","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106412","date":"2026-10-09","epss":0.00236,"percentile":0.13455}],"risk":0.18644000000000002,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/520755056"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106412","description":"Race condition in Core in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106426","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106426","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106426","cwe":"CWE-362","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106426","date":"2026-10-09","epss":0.00236,"percentile":0.13425}],"risk":0.18644000000000002,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/547065823"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106426","description":"Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95285","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95285","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.4,"impactScore":5.9,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95285","cwe":"CWE-862","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95285","date":"2026-10-09","epss":0.00232,"percentile":0.12972}],"risk":0.18444000000000002,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/497094708"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95285","description":"Missing authorization in WebView in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87541","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87541","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87541","cwe":"CWE-200","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87541","date":"2026-10-09","epss":0.0032,"percentile":0.23064}],"risk":0.184,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/517156678"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87541","description":"Information leak in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95327","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95327","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95327","cwe":"CWE-200","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95327","date":"2026-10-09","epss":0.00318,"percentile":0.22808}],"risk":0.18284999999999998,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/502077689"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95327","description":"Information leak in Networking in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95336","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95336","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95336","cwe":"CWE-200","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95336","date":"2026-10-09","epss":0.00318,"percentile":0.22808}],"risk":0.18284999999999998,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/532962621"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95336","description":"Information leak in Transactions Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95382","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95382","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95382","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95382","date":"2026-10-09","epss":0.00318,"percentile":0.22808}],"risk":0.18284999999999998,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/497212105"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95382","description":"Improper input validation in Auth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87477","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87477","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87477","cwe":"CWE-200","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87477","date":"2026-10-09","epss":0.00318,"percentile":0.22769}],"risk":0.18284999999999998,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/540059211"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87477","description":"Information leak in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87478","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87478","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87478","cwe":"CWE-203","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87478","date":"2026-10-09","epss":0.00318,"percentile":0.22769}],"risk":0.18284999999999998,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/40060525"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87478","description":"Observable discrepancy in Autofill in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87459","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87459","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87459","cwe":"CWE-203","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87459","date":"2026-10-09","epss":0.00318,"percentile":0.22768}],"risk":0.18284999999999998,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/517219513"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87459","description":"Observable discrepancy in Select in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87490","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87490","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87490","cwe":"CWE-200","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87490","date":"2026-10-09","epss":0.00318,"percentile":0.22768}],"risk":0.18284999999999998,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/533112829"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87490","description":"Information leak in Transactions Platform in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87437","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87437","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87437","cwe":"CWE-200","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87437","date":"2026-10-09","epss":0.00318,"percentile":0.22767}],"risk":0.18284999999999998,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/540082621"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87437","description":"Information leak in Frames in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87593","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87593","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87593","cwe":"CWE-200","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87593","date":"2026-10-09","epss":0.00318,"percentile":0.22767}],"risk":0.18284999999999998,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/553252820"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87593","description":"Information leak in Editing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87565","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87565","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87565","cwe":"CWE-200","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87565","date":"2026-10-09","epss":0.00318,"percentile":0.22764}],"risk":0.18284999999999998,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/532968511"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87565","description":"Information leak in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87545","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87545","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87545","cwe":"CWE-200","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87545","date":"2026-10-09","epss":0.00318,"percentile":0.22763}],"risk":0.18284999999999998,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/523243507"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87545","description":"Information leak in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87620","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87620","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87620","cwe":"CWE-203","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87620","date":"2026-10-09","epss":0.00318,"percentile":0.22758}],"risk":0.18284999999999998,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/514489101"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87620","description":"Observable discrepancy in SVG in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87623","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87623","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87623","cwe":"CWE-203","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87623","date":"2026-10-09","epss":0.00318,"percentile":0.22758}],"risk":0.18284999999999998,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/540015493"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87623","description":"Observable discrepancy in DOM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c1fed726b9e0ccb7","cpes":["cpe:2.3:a:libcrypto3:libcrypto3:3.5.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto3:libcrypto:3.5.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto3:3.5.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto:3.5.8-r0:*:*:*:*:*:*:*"],"name":"libcrypto3","purl":"pkg:apk/alpine/libcrypto3@3.5.8-r0?arch=x86_64&distro=alpine-3.24.2&upstream=openssl","type":"apk","version":"3.5.8-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/ssl"},{"path":"/etc/ssl/ct_log_list.cnf"},{"path":"/etc/ssl/ct_log_list.cnf.dist"},{"path":"/etc/ssl/openssl.cnf"},{"path":"/etc/ssl/openssl.cnf.dist"},{"path":"/etc/ssl/certs"},{"path":"/etc/ssl/private"},{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcrypto.so.3"},{"path":"/usr/lib/engines-3"},{"path":"/usr/lib/engines-3/afalg.so"},{"path":"/usr/lib/engines-3/capi.so"},{"path":"/usr/lib/engines-3/loader_attic.so"},{"path":"/usr/lib/engines-3/padlock.so"},{"path":"/usr/lib/ossl-modules"},{"path":"/usr/lib/ossl-modules/legacy.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-75804","versionConstraint":">= 3.4.0, < 3.4.8||>= 3.5.0, < 3.5.9||>= 3.6.0, < 3.6.5||>= 4.0.0, < 4.0.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.5.8:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.5.8-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-75804","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-75804","cwe":"CWE-770","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-75804","date":"2026-10-09","epss":0.00352,"percentile":0.26794}],"risk":0.18128,"urls":["https://github.com/openssl/openssl/commit/2e8f54666b3fb7b05ff5f58aa6cac9285163654e","https://github.com/openssl/openssl/commit/4533ee8a5686c953ed3b644738ac4bdf20806538","https://github.com/openssl/openssl/commit/64d3102fb5b54311e92517f26ba00169d719e74a","https://github.com/openssl/openssl/commit/f9eaecf5bdd6692da052bc65b0332af2a938ac03","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-75804","description":"Issue summary: OpenSSL QUIC stack does not enforce connection\nlevel flow control for streams. Remote peers may send more bytes\nas long as they fit within the stream flow control limits.\n\nImpact summary: A malicious remote peer may exploit the lack of connection\nflow control for streams to make the QUIC stack receive ~100MB of memory\ninstead of 768 KiB (default flow control window size).\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: The local QUIC stack advertises two flow control limits\nto its remote peer: stream flow control limit and connection flow\ncontrol limit. The remote peer must follow both limits when transmitting\nstream data.\n\nWhenever the local QUIC stack receives a stream frame, it validates\nthat the size of the received stream frame stays within flow control limits.\nIf either limit is exceeded (stream level or connection level), then\nthe QUIC stack must close the connection with a flow control error.\n\nThe vulnerable OpenSSL QUIC stack enforces the stream-level but not\nthe connection-level limit. To exploit the issue, three conditions must be met:\n  - the remote peer opens several streams\n  - each stream must stay within the stream-level flow control limit\n  - there must be no zero-offset byte sent on any of the streams\n    (to prevent the vulnerable QUIC stack from consuming data).\nBy meeting the conditions above, the remote peer may make the local stack\nallocate 2 x MAX_STREAMS x (stream flow control limit) bytes\nof memory. MAX_STREAMS defaults to 100, and the limit applies to both\nbidirectional and unidirectional streams, making it 200 in total. The default\nflow control window for a stream is 512kB. The remote peer may\nforce the vulnerable QUIC stack to allocate 100MB of heap per connection.\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary."},"relatedVulnerabilities":[]},{"artifact":{"id":"269544be9368a131","cpes":["cpe:2.3:a:libssl3:libssl3:3.5.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl3:libssl:3.5.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl3:3.5.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl:3.5.8-r0:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:apk/alpine/libssl3@3.5.8-r0?arch=x86_64&distro=alpine-3.24.2&upstream=openssl","type":"apk","version":"3.5.8-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libssl.so.3"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-75804","versionConstraint":">= 3.4.0, < 3.4.8||>= 3.5.0, < 3.5.9||>= 3.6.0, < 3.6.5||>= 4.0.0, < 4.0.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.5.8:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.5.8-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-75804","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-75804","cwe":"CWE-770","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-75804","date":"2026-10-09","epss":0.00352,"percentile":0.26794}],"risk":0.18128,"urls":["https://github.com/openssl/openssl/commit/2e8f54666b3fb7b05ff5f58aa6cac9285163654e","https://github.com/openssl/openssl/commit/4533ee8a5686c953ed3b644738ac4bdf20806538","https://github.com/openssl/openssl/commit/64d3102fb5b54311e92517f26ba00169d719e74a","https://github.com/openssl/openssl/commit/f9eaecf5bdd6692da052bc65b0332af2a938ac03","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-75804","description":"Issue summary: OpenSSL QUIC stack does not enforce connection\nlevel flow control for streams. Remote peers may send more bytes\nas long as they fit within the stream flow control limits.\n\nImpact summary: A malicious remote peer may exploit the lack of connection\nflow control for streams to make the QUIC stack receive ~100MB of memory\ninstead of 768 KiB (default flow control window size).\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: The local QUIC stack advertises two flow control limits\nto its remote peer: stream flow control limit and connection flow\ncontrol limit. The remote peer must follow both limits when transmitting\nstream data.\n\nWhenever the local QUIC stack receives a stream frame, it validates\nthat the size of the received stream frame stays within flow control limits.\nIf either limit is exceeded (stream level or connection level), then\nthe QUIC stack must close the connection with a flow control error.\n\nThe vulnerable OpenSSL QUIC stack enforces the stream-level but not\nthe connection-level limit. To exploit the issue, three conditions must be met:\n  - the remote peer opens several streams\n  - each stream must stay within the stream-level flow control limit\n  - there must be no zero-offset byte sent on any of the streams\n    (to prevent the vulnerable QUIC stack from consuming data).\nBy meeting the conditions above, the remote peer may make the local stack\nallocate 2 x MAX_STREAMS x (stream flow control limit) bytes\nof memory. MAX_STREAMS defaults to 100, and the limit applies to both\nbidirectional and unidirectional streams, making it 200 in total. The default\nflow control window for a stream is 512kB. The remote peer may\nforce the vulnerable QUIC stack to allocate 100MB of heap per connection.\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary."},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106271","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106271","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106271","cwe":"CWE-862","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106271","date":"2026-10-09","epss":0.00231,"percentile":0.12862}],"risk":0.18018,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/553118313"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106271","description":"Missing authorization in Workers in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-91748","versionConstraint":"< 153.0.8010.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-91748","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91748","cwe":"CWE-367","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-91748","date":"2026-10-09","epss":0.00228,"percentile":0.12492}],"risk":0.18012,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0541751186.html","https://issues.chromium.org/issues/521559611"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91748","description":"Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via UI Interaction. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-93385","versionConstraint":"< 153.0.8010.52 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-93385","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-93385","cwe":"CWE-200","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-93385","date":"2026-10-09","epss":0.00312,"percentile":0.22123}],"risk":0.17939999999999998,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0194356994.html","https://issues.chromium.org/issues/553136980"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-93385","description":"Information leak in Paint in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87436","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87436","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87436","cwe":"CWE-459","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87436","date":"2026-10-09","epss":0.00309,"percentile":0.21825}],"risk":0.17767499999999997,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/511754574"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87436","description":"Incomplete cleanup in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87446","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87446","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87446","cwe":"CWE-459","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87446","date":"2026-10-09","epss":0.00309,"percentile":0.21825}],"risk":0.17767499999999997,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/483435192"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87446","description":"Incomplete cleanup in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87476","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87476","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87476","cwe":"CWE-863","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87476","date":"2026-10-09","epss":0.00306,"percentile":0.21505}],"risk":0.17594999999999997,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/506390077"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87476","description":"Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87631","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87631","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87631","cwe":"CWE-862","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87631","date":"2026-10-09","epss":0.00306,"percentile":0.21504}],"risk":0.17594999999999997,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/537476242"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87631","description":"Missing authorization in DOM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87443","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87443","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87443","cwe":"CWE-862","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87443","date":"2026-10-09","epss":0.00306,"percentile":0.21503}],"risk":0.17594999999999997,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/502768228"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87443","description":"Missing authorization in Actor in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c23e83d2851052a5","cpes":["cpe:2.3:a:google:grpc:v1.82.1:*:*:*:*:*:*:*"],"name":"google.golang.org/grpc","purl":"pkg:golang/google.golang.org/grpc@v1.82.1","type":"go-module","version":"v1.82.1","language":"go","licenses":[],"metadata":{"h1Digest":"h1:NnAxzGRA0677vCa4BUkOAnO5+FfQqVl9iUXeD0IqcGE=","mainModule":"k6","architecture":"amd64","goCompiledVersion":"go1.26.6"},"locations":[{"path":"/usr/libexec/sm-k6/k6-v1","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/usr/libexec/sm-k6/k6-v1","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.83.1"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-qc2q-p7wx-3px3","versionConstraint":"<=1.83.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"google.golang.org/grpc","version":"v1.82.1"},"language":"go","namespace":"github:language:go"}}],"vulnerability":{"id":"GHSA-qc2q-p7wx-3px3","fix":{"state":"fixed","versions":["1.83.1"],"available":[{"date":"2026-09-09","kind":"first-observed","version":"1.83.1"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84303","cwe":"CWE-178","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-84303","cwe":"CWE-863","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-84303","date":"2026-10-09","epss":0.00311,"percentile":0.2201}],"risk":0.17571499999999998,"urls":["https://github.com/grpc/grpc-go/security/advisories/GHSA-qc2q-p7wx-3px3","https://nvd.nist.gov/vuln/detail/CVE-2026-84303","https://github.com/grpc/grpc-go/pull/9332","https://github.com/grpc/grpc-go/pull/9335","https://github.com/grpc/grpc-go/commit/db9482836c298f234c896cf82ab68cafc78237f8","https://github.com/grpc/grpc-go/commit/ebba6f3f1b206e2b4dc4d1d5a96d18430302c2fe","https://github.com/grpc/grpc-go/releases/tag/v1.83.1"],"severity":"Medium","namespace":"github:language:go","advisories":[],"dataSource":"https://github.com/advisories/GHSA-qc2q-p7wx-3px3","description":"gRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasion"},"relatedVulnerabilities":[{"id":"CVE-2026-84303","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84303","cwe":"CWE-178","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-84303","cwe":"CWE-863","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-84303","date":"2026-10-09","epss":0.00311,"percentile":0.2201}],"urls":["https://github.com/grpc/grpc-go/commit/db9482836c298f234c896cf82ab68cafc78237f8","https://github.com/grpc/grpc-go/commit/ebba6f3f1b206e2b4dc4d1d5a96d18430302c2fe","https://github.com/grpc/grpc-go/pull/9332","https://github.com/grpc/grpc-go/pull/9335","https://github.com/grpc/grpc-go/releases/tag/v1.83.1","https://github.com/grpc/grpc-go/security/advisories/GHSA-qc2q-p7wx-3px3"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-84303","description":"gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, the xDS RBAC HTTP filter in internal/xds/httpfilter/rbac/rbac.go does not lowercase header matcher names in normalizeHeaderMatcher even though incoming metadata keys are lowercase. A DENY policy using a mixed-case name such as X-Role or User-Agent therefore does not match and fails open, allowing requests that should be rejected. The same case mismatch permits :Scheme or Grpc-Status to evade gRFC A41 validation and prevents Host from being rewritten to :authority. This issue is fixed in version 1.83.1."}]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95344","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95344","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N","metrics":{"baseScore":8,"impactScore":5.8,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95344","cwe":"CWE-367","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95344","date":"2026-10-09","epss":0.00226,"percentile":0.12242}],"risk":0.17515,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/548611433"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95344","description":"Race condition in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass site isolation via a crafted Chrome extension. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95278","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95278","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.4,"impactScore":5.9,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95278","cwe":"CWE-862","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95278","date":"2026-10-09","epss":0.0022,"percentile":0.11491}],"risk":0.1749,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/497344014"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95278","description":"Missing authorization in WakeLock in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106403","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106403","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106403","cwe":"CWE-863","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106403","date":"2026-10-09","epss":0.00224,"percentile":0.11944}],"risk":0.17472,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/523601696"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106403","description":"Incorrect authorization in Accessibility in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95297","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95297","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95297","cwe":"CWE-862","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95297","date":"2026-10-09","epss":0.00303,"percentile":0.21184}],"risk":0.174225,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/501648493"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95297","description":"Missing authorization in Contextual Tasks in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87590","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87590","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87590","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87590","date":"2026-10-09","epss":0.00316,"percentile":0.2255}],"risk":0.17222,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/502814490"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87590","description":"Improper input validation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially leak sensitive information via crafted network traffic. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-91732","versionConstraint":"< 153.0.8010.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-91732","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91732","cwe":"CWE-862","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-91732","date":"2026-10-09","epss":0.00261,"percentile":0.16475}],"risk":0.170955,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0541751186.html","https://issues.chromium.org/issues/511062248"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91732","description":"Missing authorization in AppManifest in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87600","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87600","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87600","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87600","date":"2026-10-09","epss":0.00297,"percentile":0.20588}],"risk":0.17077499999999998,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/517339356"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87600","description":"Improper input validation in Safebrowsing in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"5b157b98b5ac0132","cpes":["cpe:2.3:a:golang:networking:v0.57.0:*:*:*:*:go:*:*","cpe:2.3:a:golang:net:v0.57.0:*:*:*:*:go:*:*"],"name":"golang.org/x/net","purl":"pkg:golang/golang.org/x/net@v0.57.0","type":"go-module","version":"v0.57.0","language":"go","licenses":[],"metadata":{"h1Digest":"h1:K5+3DljvIuDG9/Jv9rvyMywYNFCQ9RSUY6OOTTkT+tE=","mainModule":"k6","architecture":"amd64","goCompiledVersion":"go1.26.6"},"locations":[{"path":"/usr/libexec/sm-k6/k6-v1","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/usr/libexec/sm-k6/k6-v1","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.60.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6611","versionConstraint":"<0.60.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/net","version":"v0.57.0"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6611","fix":{"state":"fixed","versions":["0.60.0"],"available":[{"date":"2026-10-08","kind":"release","version":"0.60.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78669","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78669","date":"2026-10-09","epss":0.00227,"percentile":0.12384}],"risk":0.17025,"urls":["https://go.dev/cl/847308","https://go.dev/issue/81742","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847186","description":"A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values."},"relatedVulnerabilities":[{"id":"CVE-2026-78669","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78669","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78669","date":"2026-10-09","epss":0.00227,"percentile":0.12384}],"urls":["https://go.dev/cl/847186","https://go.dev/cl/847308","https://go.dev/issue/81742","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6611"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78669","description":"A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values."}]},{"artifact":{"id":"035636176708beac","cpes":["cpe:2.3:a:golang:networking:v0.58.0:*:*:*:*:go:*:*","cpe:2.3:a:golang:net:v0.58.0:*:*:*:*:go:*:*"],"name":"golang.org/x/net","purl":"pkg:golang/golang.org/x/net@v0.58.0","type":"go-module","version":"v0.58.0","language":"go","licenses":[],"metadata":{"h1Digest":"h1:ynWG7rqYi4ccpTEuPZ2QGWHktVEM9DMCj9yzDE0Q7To=","mainModule":"k6","architecture":"amd64","goCompiledVersion":"go1.26.7"},"locations":[{"path":"/usr/libexec/sm-k6/k6-v2","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/usr/libexec/sm-k6/k6-v2","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.60.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6611","versionConstraint":"<0.60.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/net","version":"v0.58.0"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6611","fix":{"state":"fixed","versions":["0.60.0"],"available":[{"date":"2026-10-08","kind":"release","version":"0.60.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78669","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78669","date":"2026-10-09","epss":0.00227,"percentile":0.12384}],"risk":0.17025,"urls":["https://go.dev/cl/847308","https://go.dev/issue/81742","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847186","description":"A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values."},"relatedVulnerabilities":[{"id":"CVE-2026-78669","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78669","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78669","date":"2026-10-09","epss":0.00227,"percentile":0.12384}],"urls":["https://go.dev/cl/847186","https://go.dev/cl/847308","https://go.dev/issue/81742","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6611"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78669","description":"A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values."}]},{"artifact":{"id":"178f5d911424f514","cpes":["cpe:2.3:a:golang:networking:v0.59.0:*:*:*:*:go:*:*","cpe:2.3:a:golang:net:v0.59.0:*:*:*:*:go:*:*"],"name":"golang.org/x/net","purl":"pkg:golang/golang.org/x/net@v0.59.0","type":"go-module","version":"v0.59.0","language":"go","licenses":[],"metadata":{"h1Digest":"h1:5zfYln+w5XCxwrnMMJPufRgNoXEaGxl0wo5GqPXyues=","mainModule":"github.com/grafana/synthetic-monitoring-agent","architecture":"amd64","goCompiledVersion":"go1.26.7"},"locations":[{"path":"/usr/local/bin/synthetic-monitoring-agent","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/usr/local/bin/synthetic-monitoring-agent","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.60.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6611","versionConstraint":"<0.60.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/net","version":"v0.59.0"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6611","fix":{"state":"fixed","versions":["0.60.0"],"available":[{"date":"2026-10-08","kind":"release","version":"0.60.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78669","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78669","date":"2026-10-09","epss":0.00227,"percentile":0.12384}],"risk":0.17025,"urls":["https://go.dev/cl/847308","https://go.dev/issue/81742","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847186","description":"A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values."},"relatedVulnerabilities":[{"id":"CVE-2026-78669","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78669","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78669","date":"2026-10-09","epss":0.00227,"percentile":0.12384}],"urls":["https://go.dev/cl/847186","https://go.dev/cl/847308","https://go.dev/issue/81742","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6611"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78669","description":"A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values."}]},{"artifact":{"id":"233a0e4c47ab9bff","cpes":["cpe:2.3:a:golang:go:1.26.6:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.26.6","type":"go-module","version":"go1.26.6","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.26.6"},"locations":[{"path":"/usr/libexec/sm-k6/k6-v1","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/usr/libexec/sm-k6/k6-v1","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.26.9"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6611","versionConstraint":"<1.26.9 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.26.6"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6611","fix":{"state":"fixed","versions":["1.26.9"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78669","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78669","date":"2026-10-09","epss":0.00227,"percentile":0.12384}],"risk":0.17025,"urls":["https://go.dev/cl/847308","https://go.dev/issue/81742","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847186","description":"A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values."},"relatedVulnerabilities":[{"id":"CVE-2026-78669","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78669","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78669","date":"2026-10-09","epss":0.00227,"percentile":0.12384}],"urls":["https://go.dev/cl/847186","https://go.dev/cl/847308","https://go.dev/issue/81742","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6611"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78669","description":"A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values."}]},{"artifact":{"id":"fe444b5362ab73cd","cpes":["cpe:2.3:a:golang:go:1.26.7:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.26.7","type":"go-module","version":"go1.26.7","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.26.7"},"locations":[{"path":"/usr/local/bin/synthetic-monitoring-agent","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/usr/local/bin/synthetic-monitoring-agent","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.26.9"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6611","versionConstraint":"<1.26.9 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.26.7"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6611","fix":{"state":"fixed","versions":["1.26.9"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78669","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78669","date":"2026-10-09","epss":0.00227,"percentile":0.12384}],"risk":0.17025,"urls":["https://go.dev/cl/847308","https://go.dev/issue/81742","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847186","description":"A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values."},"relatedVulnerabilities":[{"id":"CVE-2026-78669","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78669","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78669","date":"2026-10-09","epss":0.00227,"percentile":0.12384}],"urls":["https://go.dev/cl/847186","https://go.dev/cl/847308","https://go.dev/issue/81742","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6611"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78669","description":"A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values."}]},{"artifact":{"id":"7bc26ab97a58f111","cpes":["cpe:2.3:a:golang:go:1.26.7:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.26.7","type":"go-module","version":"go1.26.7","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.26.7"},"locations":[{"path":"/usr/libexec/sm-k6/k6-v2","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/usr/libexec/sm-k6/k6-v2","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.26.9"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6611","versionConstraint":"<1.26.9 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.26.7"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6611","fix":{"state":"fixed","versions":["1.26.9"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78669","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78669","date":"2026-10-09","epss":0.00227,"percentile":0.12384}],"risk":0.17025,"urls":["https://go.dev/cl/847308","https://go.dev/issue/81742","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847186","description":"A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values."},"relatedVulnerabilities":[{"id":"CVE-2026-78669","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78669","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78669","date":"2026-10-09","epss":0.00227,"percentile":0.12384}],"urls":["https://go.dev/cl/847186","https://go.dev/cl/847308","https://go.dev/issue/81742","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6611"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78669","description":"A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values."}]},{"artifact":{"id":"5b157b98b5ac0132","cpes":["cpe:2.3:a:golang:networking:v0.57.0:*:*:*:*:go:*:*","cpe:2.3:a:golang:net:v0.57.0:*:*:*:*:go:*:*"],"name":"golang.org/x/net","purl":"pkg:golang/golang.org/x/net@v0.57.0","type":"go-module","version":"v0.57.0","language":"go","licenses":[],"metadata":{"h1Digest":"h1:K5+3DljvIuDG9/Jv9rvyMywYNFCQ9RSUY6OOTTkT+tE=","mainModule":"k6","architecture":"amd64","goCompiledVersion":"go1.26.6"},"locations":[{"path":"/usr/libexec/sm-k6/k6-v1","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/usr/libexec/sm-k6/k6-v1","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.60.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6603","versionConstraint":"<0.60.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/net","version":"v0.57.0"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6603","fix":{"state":"fixed","versions":["0.60.0"],"available":[{"date":"2026-10-08","kind":"release","version":"0.60.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78659","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78659","date":"2026-10-09","epss":0.00227,"percentile":0.12359}],"risk":0.17025,"urls":["https://go.dev/cl/847314","https://go.dev/issue/81857","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847185","description":"When \"Trailer\" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending a \"Trailer\" header that declares a large number of fields, causing the server to allocate a disproportionate amount of memory while bypassing Server.MaxHeaderValueCount and Server.MaxHeaderBytes limits. This exploit is not applicable for HTTP/1 servers, which do not support multiplexing a large number of requests over one TCP connection, and whose Server.MaxHeaderBytes are calculated differently."},"relatedVulnerabilities":[{"id":"CVE-2026-78659","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78659","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78659","date":"2026-10-09","epss":0.00227,"percentile":0.12359}],"urls":["https://go.dev/cl/847185","https://go.dev/cl/847314","https://go.dev/issue/81857","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6603"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78659","description":"When \"Trailer\" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending a \"Trailer\" header that declares a large number of fields, causing the server to allocate a disproportionate amount of memory while bypassing Server.MaxHeaderValueCount and Server.MaxHeaderBytes limits. This exploit is not applicable for HTTP/1 servers, which do not support multiplexing a large number of requests over one TCP connection, and whose Server.MaxHeaderBytes are calculated differently."}]},{"artifact":{"id":"035636176708beac","cpes":["cpe:2.3:a:golang:networking:v0.58.0:*:*:*:*:go:*:*","cpe:2.3:a:golang:net:v0.58.0:*:*:*:*:go:*:*"],"name":"golang.org/x/net","purl":"pkg:golang/golang.org/x/net@v0.58.0","type":"go-module","version":"v0.58.0","language":"go","licenses":[],"metadata":{"h1Digest":"h1:ynWG7rqYi4ccpTEuPZ2QGWHktVEM9DMCj9yzDE0Q7To=","mainModule":"k6","architecture":"amd64","goCompiledVersion":"go1.26.7"},"locations":[{"path":"/usr/libexec/sm-k6/k6-v2","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/usr/libexec/sm-k6/k6-v2","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.60.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6603","versionConstraint":"<0.60.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/net","version":"v0.58.0"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6603","fix":{"state":"fixed","versions":["0.60.0"],"available":[{"date":"2026-10-08","kind":"release","version":"0.60.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78659","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78659","date":"2026-10-09","epss":0.00227,"percentile":0.12359}],"risk":0.17025,"urls":["https://go.dev/cl/847314","https://go.dev/issue/81857","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847185","description":"When \"Trailer\" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending a \"Trailer\" header that declares a large number of fields, causing the server to allocate a disproportionate amount of memory while bypassing Server.MaxHeaderValueCount and Server.MaxHeaderBytes limits. This exploit is not applicable for HTTP/1 servers, which do not support multiplexing a large number of requests over one TCP connection, and whose Server.MaxHeaderBytes are calculated differently."},"relatedVulnerabilities":[{"id":"CVE-2026-78659","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78659","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78659","date":"2026-10-09","epss":0.00227,"percentile":0.12359}],"urls":["https://go.dev/cl/847185","https://go.dev/cl/847314","https://go.dev/issue/81857","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6603"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78659","description":"When \"Trailer\" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending a \"Trailer\" header that declares a large number of fields, causing the server to allocate a disproportionate amount of memory while bypassing Server.MaxHeaderValueCount and Server.MaxHeaderBytes limits. This exploit is not applicable for HTTP/1 servers, which do not support multiplexing a large number of requests over one TCP connection, and whose Server.MaxHeaderBytes are calculated differently."}]},{"artifact":{"id":"178f5d911424f514","cpes":["cpe:2.3:a:golang:networking:v0.59.0:*:*:*:*:go:*:*","cpe:2.3:a:golang:net:v0.59.0:*:*:*:*:go:*:*"],"name":"golang.org/x/net","purl":"pkg:golang/golang.org/x/net@v0.59.0","type":"go-module","version":"v0.59.0","language":"go","licenses":[],"metadata":{"h1Digest":"h1:5zfYln+w5XCxwrnMMJPufRgNoXEaGxl0wo5GqPXyues=","mainModule":"github.com/grafana/synthetic-monitoring-agent","architecture":"amd64","goCompiledVersion":"go1.26.7"},"locations":[{"path":"/usr/local/bin/synthetic-monitoring-agent","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/usr/local/bin/synthetic-monitoring-agent","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.60.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6603","versionConstraint":"<0.60.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/net","version":"v0.59.0"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6603","fix":{"state":"fixed","versions":["0.60.0"],"available":[{"date":"2026-10-08","kind":"release","version":"0.60.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78659","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78659","date":"2026-10-09","epss":0.00227,"percentile":0.12359}],"risk":0.17025,"urls":["https://go.dev/cl/847314","https://go.dev/issue/81857","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847185","description":"When \"Trailer\" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending a \"Trailer\" header that declares a large number of fields, causing the server to allocate a disproportionate amount of memory while bypassing Server.MaxHeaderValueCount and Server.MaxHeaderBytes limits. This exploit is not applicable for HTTP/1 servers, which do not support multiplexing a large number of requests over one TCP connection, and whose Server.MaxHeaderBytes are calculated differently."},"relatedVulnerabilities":[{"id":"CVE-2026-78659","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78659","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78659","date":"2026-10-09","epss":0.00227,"percentile":0.12359}],"urls":["https://go.dev/cl/847185","https://go.dev/cl/847314","https://go.dev/issue/81857","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6603"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78659","description":"When \"Trailer\" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending a \"Trailer\" header that declares a large number of fields, causing the server to allocate a disproportionate amount of memory while bypassing Server.MaxHeaderValueCount and Server.MaxHeaderBytes limits. This exploit is not applicable for HTTP/1 servers, which do not support multiplexing a large number of requests over one TCP connection, and whose Server.MaxHeaderBytes are calculated differently."}]},{"artifact":{"id":"233a0e4c47ab9bff","cpes":["cpe:2.3:a:golang:go:1.26.6:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.26.6","type":"go-module","version":"go1.26.6","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.26.6"},"locations":[{"path":"/usr/libexec/sm-k6/k6-v1","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/usr/libexec/sm-k6/k6-v1","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.26.9"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6603","versionConstraint":"<1.26.9 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.26.6"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6603","fix":{"state":"fixed","versions":["1.26.9"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78659","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78659","date":"2026-10-09","epss":0.00227,"percentile":0.12359}],"risk":0.17025,"urls":["https://go.dev/cl/847314","https://go.dev/issue/81857","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847185","description":"When \"Trailer\" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending a \"Trailer\" header that declares a large number of fields, causing the server to allocate a disproportionate amount of memory while bypassing Server.MaxHeaderValueCount and Server.MaxHeaderBytes limits. This exploit is not applicable for HTTP/1 servers, which do not support multiplexing a large number of requests over one TCP connection, and whose Server.MaxHeaderBytes are calculated differently."},"relatedVulnerabilities":[{"id":"CVE-2026-78659","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78659","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78659","date":"2026-10-09","epss":0.00227,"percentile":0.12359}],"urls":["https://go.dev/cl/847185","https://go.dev/cl/847314","https://go.dev/issue/81857","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6603"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78659","description":"When \"Trailer\" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending a \"Trailer\" header that declares a large number of fields, causing the server to allocate a disproportionate amount of memory while bypassing Server.MaxHeaderValueCount and Server.MaxHeaderBytes limits. This exploit is not applicable for HTTP/1 servers, which do not support multiplexing a large number of requests over one TCP connection, and whose Server.MaxHeaderBytes are calculated differently."}]},{"artifact":{"id":"7bc26ab97a58f111","cpes":["cpe:2.3:a:golang:go:1.26.7:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.26.7","type":"go-module","version":"go1.26.7","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.26.7"},"locations":[{"path":"/usr/libexec/sm-k6/k6-v2","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/usr/libexec/sm-k6/k6-v2","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.26.9"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6603","versionConstraint":"<1.26.9 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.26.7"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6603","fix":{"state":"fixed","versions":["1.26.9"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78659","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78659","date":"2026-10-09","epss":0.00227,"percentile":0.12359}],"risk":0.17025,"urls":["https://go.dev/cl/847314","https://go.dev/issue/81857","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847185","description":"When \"Trailer\" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending a \"Trailer\" header that declares a large number of fields, causing the server to allocate a disproportionate amount of memory while bypassing Server.MaxHeaderValueCount and Server.MaxHeaderBytes limits. This exploit is not applicable for HTTP/1 servers, which do not support multiplexing a large number of requests over one TCP connection, and whose Server.MaxHeaderBytes are calculated differently."},"relatedVulnerabilities":[{"id":"CVE-2026-78659","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78659","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78659","date":"2026-10-09","epss":0.00227,"percentile":0.12359}],"urls":["https://go.dev/cl/847185","https://go.dev/cl/847314","https://go.dev/issue/81857","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6603"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78659","description":"When \"Trailer\" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending a \"Trailer\" header that declares a large number of fields, causing the server to allocate a disproportionate amount of memory while bypassing Server.MaxHeaderValueCount and Server.MaxHeaderBytes limits. This exploit is not applicable for HTTP/1 servers, which do not support multiplexing a large number of requests over one TCP connection, and whose Server.MaxHeaderBytes are calculated differently."}]},{"artifact":{"id":"fe444b5362ab73cd","cpes":["cpe:2.3:a:golang:go:1.26.7:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.26.7","type":"go-module","version":"go1.26.7","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.26.7"},"locations":[{"path":"/usr/local/bin/synthetic-monitoring-agent","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/usr/local/bin/synthetic-monitoring-agent","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.26.9"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6603","versionConstraint":"<1.26.9 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.26.7"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6603","fix":{"state":"fixed","versions":["1.26.9"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78659","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78659","date":"2026-10-09","epss":0.00227,"percentile":0.12359}],"risk":0.17025,"urls":["https://go.dev/cl/847314","https://go.dev/issue/81857","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847185","description":"When \"Trailer\" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending a \"Trailer\" header that declares a large number of fields, causing the server to allocate a disproportionate amount of memory while bypassing Server.MaxHeaderValueCount and Server.MaxHeaderBytes limits. This exploit is not applicable for HTTP/1 servers, which do not support multiplexing a large number of requests over one TCP connection, and whose Server.MaxHeaderBytes are calculated differently."},"relatedVulnerabilities":[{"id":"CVE-2026-78659","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78659","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78659","date":"2026-10-09","epss":0.00227,"percentile":0.12359}],"urls":["https://go.dev/cl/847185","https://go.dev/cl/847314","https://go.dev/issue/81857","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6603"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78659","description":"When \"Trailer\" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending a \"Trailer\" header that declares a large number of fields, causing the server to allocate a disproportionate amount of memory while bypassing Server.MaxHeaderValueCount and Server.MaxHeaderBytes limits. This exploit is not applicable for HTTP/1 servers, which do not support multiplexing a large number of requests over one TCP connection, and whose Server.MaxHeaderBytes are calculated differently."}]},{"artifact":{"id":"c1fed726b9e0ccb7","cpes":["cpe:2.3:a:libcrypto3:libcrypto3:3.5.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto3:libcrypto:3.5.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto3:3.5.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto:3.5.8-r0:*:*:*:*:*:*:*"],"name":"libcrypto3","purl":"pkg:apk/alpine/libcrypto3@3.5.8-r0?arch=x86_64&distro=alpine-3.24.2&upstream=openssl","type":"apk","version":"3.5.8-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/ssl"},{"path":"/etc/ssl/ct_log_list.cnf"},{"path":"/etc/ssl/ct_log_list.cnf.dist"},{"path":"/etc/ssl/openssl.cnf"},{"path":"/etc/ssl/openssl.cnf.dist"},{"path":"/etc/ssl/certs"},{"path":"/etc/ssl/private"},{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcrypto.so.3"},{"path":"/usr/lib/engines-3"},{"path":"/usr/lib/engines-3/afalg.so"},{"path":"/usr/lib/engines-3/capi.so"},{"path":"/usr/lib/engines-3/loader_attic.so"},{"path":"/usr/lib/engines-3/padlock.so"},{"path":"/usr/lib/ossl-modules"},{"path":"/usr/lib/ossl-modules/legacy.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-42772","versionConstraint":">= 3.4.0, < 3.4.8||>= 3.5.0, < 3.5.9||>= 3.6.0, < 3.6.5||>= 4.0.0, < 4.0.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.5.8:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.5.8-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-42772","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42772","cwe":"CWE-407","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-42772","date":"2026-10-09","epss":0.0033,"percentile":0.24071}],"risk":0.16995000000000002,"urls":["https://github.com/openssl/openssl/commit/32d0ed8afe1b8c3e7ece725b44663da3d7087a09","https://github.com/openssl/openssl/commit/ca8402e273af4de5b3f04fa61a0f0c02ce3ae20e","https://github.com/openssl/openssl/commit/eb2becc0a4baea7f3050a247834d0e5c2ebe1773","https://github.com/openssl/openssl/commit/f42ae513bbda513b3c121d54834040ee4a0eae1a","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-42772","description":"Issue summary: The QUIC stream reassembly algorithm performance deteriorates\nprogressively as packets are arriving out of order. The worst case has\na quadratic complexity proportional to the number of stream frames kept in\nthe buffer for the received stream data.\n\nImpact summary: A remote QUIC peer that completes the handshake can create\na connection-scoped CPU pressure and potentially a Denial of Service using\ncompliant STREAM frames inside the advertised receive window, with low\nattacker bandwidth.\n\nCWE: CWE-407: Inefficient Algorithmic Complexity\n\nDescription: OpenSSL manages received QUIC stream fragments using a\ndoubly-linked list. While it optimizes for append operations (at the end of\nthe list), it falls back to a head-to-tail linear search for any fragment\nthat does not immediately follow the current `tail`.\n\nBy manipulating the sequence of offsets, an attacker can force the server\nto perform O(n^2) operations, consuming excessive CPU time for the\nQUIC process.\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary."},"relatedVulnerabilities":[]},{"artifact":{"id":"269544be9368a131","cpes":["cpe:2.3:a:libssl3:libssl3:3.5.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl3:libssl:3.5.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl3:3.5.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl:3.5.8-r0:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:apk/alpine/libssl3@3.5.8-r0?arch=x86_64&distro=alpine-3.24.2&upstream=openssl","type":"apk","version":"3.5.8-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libssl.so.3"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-42772","versionConstraint":">= 3.4.0, < 3.4.8||>= 3.5.0, < 3.5.9||>= 3.6.0, < 3.6.5||>= 4.0.0, < 4.0.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.5.8:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.5.8-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-42772","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42772","cwe":"CWE-407","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-42772","date":"2026-10-09","epss":0.0033,"percentile":0.24071}],"risk":0.16995000000000002,"urls":["https://github.com/openssl/openssl/commit/32d0ed8afe1b8c3e7ece725b44663da3d7087a09","https://github.com/openssl/openssl/commit/ca8402e273af4de5b3f04fa61a0f0c02ce3ae20e","https://github.com/openssl/openssl/commit/eb2becc0a4baea7f3050a247834d0e5c2ebe1773","https://github.com/openssl/openssl/commit/f42ae513bbda513b3c121d54834040ee4a0eae1a","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-42772","description":"Issue summary: The QUIC stream reassembly algorithm performance deteriorates\nprogressively as packets are arriving out of order. The worst case has\na quadratic complexity proportional to the number of stream frames kept in\nthe buffer for the received stream data.\n\nImpact summary: A remote QUIC peer that completes the handshake can create\na connection-scoped CPU pressure and potentially a Denial of Service using\ncompliant STREAM frames inside the advertised receive window, with low\nattacker bandwidth.\n\nCWE: CWE-407: Inefficient Algorithmic Complexity\n\nDescription: OpenSSL manages received QUIC stream fragments using a\ndoubly-linked list. While it optimizes for append operations (at the end of\nthe list), it falls back to a head-to-tail linear search for any fragment\nthat does not immediately follow the current `tail`.\n\nBy manipulating the sequence of offsets, an attacker can force the server\nto perform O(n^2) operations, consuming excessive CPU time for the\nQUIC process.\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary."},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95362","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95362","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95362","cwe":"CWE-352","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95362","date":"2026-10-09","epss":0.00206,"percentile":0.09739}],"risk":0.16789000000000004,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/511791538"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95362","description":"Cross-site request forgery in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"fef07e9c95ea2bda","cpes":["cpe:2.3:a:busybox:busybox:1.37.0-r31:*:*:*:*:*:*:*"],"name":"busybox","purl":"pkg:apk/alpine/busybox@1.37.0-r31?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"1.37.0-r31","language":"","licenses":["GPL-2.0-only"],"metadata":{"Arch":"x86_64","files":[{"path":"/bin"},{"path":"/bin/busybox"},{"path":"/etc"},{"path":"/etc/securetty"},{"path":"/etc/busybox-paths.d"},{"path":"/etc/busybox-paths.d/busybox"},{"path":"/etc/logrotate.d"},{"path":"/etc/logrotate.d/acpid"},{"path":"/etc/network"},{"path":"/etc/network/if-down.d"},{"path":"/etc/network/if-post-down.d"},{"path":"/etc/network/if-post-up.d"},{"path":"/etc/network/if-pre-down.d"},{"path":"/etc/network/if-pre-up.d"},{"path":"/etc/network/if-up.d"},{"path":"/etc/network/if-up.d/dad"},{"path":"/etc/udhcpc"},{"path":"/etc/udhcpc/udhcpc.conf"},{"path":"/sbin"},{"path":"/usr"},{"path":"/usr/sbin"},{"path":"/usr/share"},{"path":"/usr/share/udhcpc"},{"path":"/usr/share/udhcpc/default.script"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"busybox"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-60876","versionConstraint":"<= 1.37.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:busybox:busybox:1.37.0:*:*:*:*:*:*:*"],"package":{"name":"busybox","version":"1.37.0-r31"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-60876","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-60876","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-60876","date":"2026-10-09","epss":0.00291,"percentile":0.19912}],"risk":0.16732499999999997,"urls":["https://gist.github.com/subyumatest/41554af6a72aedaacaec026adc311092","https://lists.busybox.net/pipermail/busybox/attachments/20250823/ccdc96ef/attachment-0001.htm","https://lists.busybox.net/pipermail/busybox/attachments/20250828/e7f90492/attachment.htm","https://cert-portal.siemens.com/productcert/html/ssa-253495.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-60876","description":"BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20)."},"relatedVulnerabilities":[]},{"artifact":{"id":"915155597fcdee9a","cpes":["cpe:2.3:a:busybox-binsh:busybox-binsh:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:busybox-binsh:busybox_binsh:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:busybox_binsh:busybox-binsh:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:busybox_binsh:busybox_binsh:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:busybox:busybox-binsh:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:busybox:busybox_binsh:1.37.0-r31:*:*:*:*:*:*:*"],"name":"busybox-binsh","purl":"pkg:apk/alpine/busybox-binsh@1.37.0-r31?arch=x86_64&distro=alpine-3.24.2&upstream=busybox","type":"apk","version":"1.37.0-r31","language":"","licenses":["GPL-2.0-only"],"metadata":{"Arch":"x86_64","files":[{"path":"/bin"},{"path":"/bin/sh"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"busybox"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-60876","versionConstraint":"<= 1.37.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:busybox:busybox:1.37.0:*:*:*:*:*:*:*"],"package":{"name":"busybox","version":"1.37.0-r31"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-60876","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-60876","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-60876","date":"2026-10-09","epss":0.00291,"percentile":0.19912}],"risk":0.16732499999999997,"urls":["https://gist.github.com/subyumatest/41554af6a72aedaacaec026adc311092","https://lists.busybox.net/pipermail/busybox/attachments/20250823/ccdc96ef/attachment-0001.htm","https://lists.busybox.net/pipermail/busybox/attachments/20250828/e7f90492/attachment.htm","https://cert-portal.siemens.com/productcert/html/ssa-253495.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-60876","description":"BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20)."},"relatedVulnerabilities":[]},{"artifact":{"id":"8a9ef44e1018f213","cpes":["cpe:2.3:a:ssl-client:ssl-client:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:ssl-client:ssl_client:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:ssl_client:ssl-client:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:ssl_client:ssl_client:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:ssl:ssl-client:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:ssl:ssl_client:1.37.0-r31:*:*:*:*:*:*:*"],"name":"ssl_client","purl":"pkg:apk/alpine/ssl_client@1.37.0-r31?arch=x86_64&distro=alpine-3.24.2&upstream=busybox","type":"apk","version":"1.37.0-r31","language":"","licenses":["GPL-2.0-only"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/ssl_client"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"busybox"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-60876","versionConstraint":"<= 1.37.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:busybox:busybox:1.37.0:*:*:*:*:*:*:*"],"package":{"name":"busybox","version":"1.37.0-r31"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-60876","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-60876","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-60876","date":"2026-10-09","epss":0.00291,"percentile":0.19912}],"risk":0.16732499999999997,"urls":["https://gist.github.com/subyumatest/41554af6a72aedaacaec026adc311092","https://lists.busybox.net/pipermail/busybox/attachments/20250823/ccdc96ef/attachment-0001.htm","https://lists.busybox.net/pipermail/busybox/attachments/20250828/e7f90492/attachment.htm","https://cert-portal.siemens.com/productcert/html/ssa-253495.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-60876","description":"BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20)."},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106206","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106206","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106206","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106206","date":"2026-10-09","epss":0.00303,"percentile":0.21146}],"risk":0.16513500000000003,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/517374100"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106206","description":"Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87429","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87429","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87429","cwe":"CWE-862","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87429","date":"2026-10-09","epss":0.00286,"percentile":0.19432}],"risk":0.16444999999999999,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/497025031"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87429","description":"Missing authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87473","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87473","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87473","cwe":"CWE-863","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87473","date":"2026-10-09","epss":0.00286,"percentile":0.1943}],"risk":0.16444999999999999,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/537101736"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87473","description":"Incorrect authorization in FileHandling in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87610","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87610","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87610","cwe":"CWE-863","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87610","date":"2026-10-09","epss":0.00286,"percentile":0.19429}],"risk":0.16444999999999999,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/547592631"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87610","description":"Incorrect authorization in Omnibox in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87519","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87519","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87519","cwe":"CWE-863","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87519","date":"2026-10-09","epss":0.00286,"percentile":0.19428}],"risk":0.16444999999999999,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/501763003"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87519","description":"Incorrect authorization in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87603","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87603","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87603","cwe":"CWE-862","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87603","date":"2026-10-09","epss":0.00286,"percentile":0.19428}],"risk":0.16444999999999999,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/501627201"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87603","description":"Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87629","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87629","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87629","cwe":"CWE-863","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87629","date":"2026-10-09","epss":0.00285,"percentile":0.19285}],"risk":0.163875,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/490773579"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87629","description":"Incorrect authorization in Sources in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95366","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95366","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95366","cwe":"CWE-672","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95366","date":"2026-10-09","epss":0.00285,"percentile":0.19268}],"risk":0.163875,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/497204165"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95366","description":"Use of released resource in Core in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95374","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95374","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95374","cwe":"CWE-863","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95374","date":"2026-10-09","epss":0.00282,"percentile":0.19019}],"risk":0.16215,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/543464436"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95374","description":"Incorrect authorization in Network in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87584","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87584","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87584","cwe":"CWE-863","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87584","date":"2026-10-09","epss":0.00282,"percentile":0.18984}],"risk":0.16215,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/537466493"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87584","description":"Incorrect authorization in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87483","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87483","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87483","cwe":"CWE-863","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87483","date":"2026-10-09","epss":0.00282,"percentile":0.18983}],"risk":0.16215,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/520201931"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87483","description":"Incorrect authorization in Browser in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87580","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87580","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87580","cwe":"CWE-863","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87580","date":"2026-10-09","epss":0.00282,"percentile":0.18983}],"risk":0.16215,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/502986244"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87580","description":"Incorrect authorization in WebAppInstalls in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"2c78c176e93c9919","cpes":["cpe:2.3:a:pcre2:pcre2:10.48-r0:*:*:*:*:*:*:*","cpe:2.3:a:pcre2:pcre:10.48-r0:*:*:*:*:*:*:*","cpe:2.3:a:pcre:pcre2:10.48-r0:*:*:*:*:*:*:*","cpe:2.3:a:pcre:pcre:10.48-r0:*:*:*:*:*:*:*"],"name":"pcre2","purl":"pkg:apk/alpine/pcre2@10.48-r0?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"10.48-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpcre2-8.so.0"},{"path":"/usr/lib/libpcre2-8.so.0.16.0"},{"path":"/usr/lib/libpcre2-posix.so.3"},{"path":"/usr/lib/libpcre2-posix.so.3.0.8"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"pcre2"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"10.49-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-103111","versionConstraint":"< 10.49-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.2"},"package":{"name":"pcre2","version":"10.48-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"10.49-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-103111","versionConstraint":"< 10.49-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.2"},"package":{"name":"pcre2","version":"10.48-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-103111","fix":{"state":"fixed","versions":["10.49-r0"],"available":[{"date":"2026-10-02","kind":"first-observed","version":"10.49-r0"}]},"cvss":[{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L","metrics":{"baseScore":7.6,"impactScore":4.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-103111","cwe":"CWE-787","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-103111","date":"2026-10-09","epss":0.00214,"percentile":0.10829}],"risk":0.16157000000000002,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-103111"},"relatedVulnerabilities":[{"id":"CVE-2026-103111","cvss":[{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L","metrics":{"baseScore":7.6,"impactScore":4.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-103111","cwe":"CWE-787","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-103111","date":"2026-10-09","epss":0.00214,"percentile":0.10829}],"urls":["https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-r9hj-j2rw-4q3m","https://lists.debian.org/debian-lts-announce/2026/10/msg00008.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-103111","description":"PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data."}]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87522","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87522","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87522","cwe":"CWE-862","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87522","date":"2026-10-09","epss":0.00279,"percentile":0.18725}],"risk":0.16042499999999998,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/507219126"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87522","description":"Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially bypass system access restrictions via crafted network traffic. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87626","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87626","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87626","cwe":"CWE-863","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87626","date":"2026-10-09","epss":0.00279,"percentile":0.18725}],"risk":0.16042499999999998,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/553155590"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87626","description":"Incorrect authorization in DeviceBoundSessionCredentials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via crafted network traffic. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-91719","versionConstraint":"< 153.0.8010.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-91719","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91719","cwe":"CWE-94","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-91719","date":"2026-10-09","epss":0.00233,"percentile":0.13006}],"risk":0.159605,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0541751186.html","https://issues.chromium.org/issues/542115030"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91719","description":"Code injection in XML in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95330","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95330","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95330","cwe":"CWE-754","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95330","date":"2026-10-09","epss":0.00277,"percentile":0.1851}],"risk":0.15927499999999997,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/517163294"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95330","description":"Improper state validation in Downloads in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87503","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87503","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87503","cwe":"CWE-841","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87503","date":"2026-10-09","epss":0.00277,"percentile":0.1849}],"risk":0.15927499999999997,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/497986036"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87503","description":"Inappropriate implementation in Downloads in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87532","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87532","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87532","cwe":"CWE-754","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87532","date":"2026-10-09","epss":0.00277,"percentile":0.1849}],"risk":0.15927499999999997,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/517369256"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87532","description":"Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"9e813491f50ba632","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70632","versionConstraint":">= 4.4, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70632","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70632","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70632","date":"2026-10-09","epss":0.00202,"percentile":0.09276}],"risk":0.158065,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70632","description":"FFmpeg versions from 4.4 up to, but not including, 9.0 contain an out-of-bounds heap write vulnerability in the native GoPro CineForm HD (CFHD) decoder that allows remote attackers to corrupt heap memory by supplying a crafted AVI file during stream probing. The cfhd_decode() function fails to enforce the non-Bayer logical output-width invariant in the transform-type-2 reconstruction path, causing horiz_filter_clip() to write oversized 16-bit sample rows far beyond the allocated output frame buffer, which can be escalated to arbitrary code execution via overwrite of a live cleanup callback pointer."},"relatedVulnerabilities":[]},{"artifact":{"id":"d07d7332fd90e2f5","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70632","versionConstraint":">= 4.4, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70632","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70632","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70632","date":"2026-10-09","epss":0.00202,"percentile":0.09276}],"risk":0.158065,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70632","description":"FFmpeg versions from 4.4 up to, but not including, 9.0 contain an out-of-bounds heap write vulnerability in the native GoPro CineForm HD (CFHD) decoder that allows remote attackers to corrupt heap memory by supplying a crafted AVI file during stream probing. The cfhd_decode() function fails to enforce the non-Bayer logical output-width invariant in the transform-type-2 reconstruction path, causing horiz_filter_clip() to write oversized 16-bit sample rows far beyond the allocated output frame buffer, which can be escalated to arbitrary code execution via overwrite of a live cleanup callback pointer."},"relatedVulnerabilities":[]},{"artifact":{"id":"50075ec0b9beb4e7","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70632","versionConstraint":">= 4.4, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70632","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70632","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70632","date":"2026-10-09","epss":0.00202,"percentile":0.09276}],"risk":0.158065,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70632","description":"FFmpeg versions from 4.4 up to, but not including, 9.0 contain an out-of-bounds heap write vulnerability in the native GoPro CineForm HD (CFHD) decoder that allows remote attackers to corrupt heap memory by supplying a crafted AVI file during stream probing. The cfhd_decode() function fails to enforce the non-Bayer logical output-width invariant in the transform-type-2 reconstruction path, causing horiz_filter_clip() to write oversized 16-bit sample rows far beyond the allocated output frame buffer, which can be escalated to arbitrary code execution via overwrite of a live cleanup callback pointer."},"relatedVulnerabilities":[]},{"artifact":{"id":"15f575ddc365a154","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70632","versionConstraint":">= 4.4, < 9 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70632","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70632","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-70632","date":"2026-10-09","epss":0.00202,"percentile":0.09276}],"risk":0.158065,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9","https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70632","description":"FFmpeg versions from 4.4 up to, but not including, 9.0 contain an out-of-bounds heap write vulnerability in the native GoPro CineForm HD (CFHD) decoder that allows remote attackers to corrupt heap memory by supplying a crafted AVI file during stream probing. The cfhd_decode() function fails to enforce the non-Bayer logical output-width invariant in the transform-type-2 reconstruction path, causing horiz_filter_clip() to write oversized 16-bit sample rows far beyond the allocated output frame buffer, which can be escalated to arbitrary code execution via overwrite of a live cleanup callback pointer."},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87627","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87627","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87627","cwe":"CWE-436","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87627","date":"2026-10-09","epss":0.00274,"percentile":0.18235}],"risk":0.15755,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/513473551"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87627","description":"Interpretation conflict in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted file. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87640","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87640","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N","metrics":{"baseScore":6.1,"impactScore":4,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N","metrics":{"baseScore":6.1,"impactScore":4,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87640","cwe":"CWE-125","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87640","date":"2026-10-09","epss":0.00283,"percentile":0.19078}],"risk":0.15706499999999998,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/498482618"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87640","description":"Out of bounds read in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106185","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106185","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106185","cwe":"CWE-20","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106185","date":"2026-10-09","epss":0.00272,"percentile":0.18035}],"risk":0.1564,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/502462485"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106185","description":"Improper input validation in Viz in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95376","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95376","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8,"impactScore":5.9,"exploitabilityScore":2.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95376","cwe":"CWE-610","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95376","date":"2026-10-09","epss":0.00201,"percentile":0.09124}],"risk":0.155775,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/513134076"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95376","description":"Externally controlled reference in DevTools in Google Chrome prior to 154.0.8037.57 allowed an adjacent attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106188","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106188","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N","metrics":{"baseScore":7.1,"impactScore":4.3,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106188","cwe":"CWE-441","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106188","date":"2026-10-09","epss":0.0022,"percentile":0.11542}],"risk":0.15510000000000002,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/515477538"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106188","description":"Confused deputy in SignIn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106181","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106181","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106181","cwe":"CWE-706","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106181","date":"2026-10-09","epss":0.00299,"percentile":0.20713}],"risk":0.153985,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/497350668"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106181","description":"Incorrect reference resolution in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87475","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87475","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87475","cwe":"CWE-862","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87475","date":"2026-10-09","epss":0.00267,"percentile":0.1726}],"risk":0.153525,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/507225626"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87475","description":"Missing authorization in Omnibox in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87513","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87513","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87513","cwe":"CWE-862","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87513","date":"2026-10-09","epss":0.00267,"percentile":0.1726}],"risk":0.153525,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/511773417"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87513","description":"Missing authorization in ControlledFrame in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87589","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87589","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87589","cwe":"CWE-863","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87589","date":"2026-10-09","epss":0.00267,"percentile":0.1726}],"risk":0.153525,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/518002426"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87589","description":"Incorrect authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87468","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87468","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87468","cwe":"CWE-863","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87468","date":"2026-10-09","epss":0.00267,"percentile":0.17259}],"risk":0.153525,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/532931962"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87468","description":"Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87493","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87493","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87493","cwe":"CWE-862","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87493","date":"2026-10-09","epss":0.00267,"percentile":0.17259}],"risk":0.153525,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/523741272"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87493","description":"Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87515","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87515","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87515","cwe":"CWE-863","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87515","date":"2026-10-09","epss":0.00267,"percentile":0.17259}],"risk":0.153525,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/497093426"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87515","description":"Incorrect authorization in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87591","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87591","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87591","cwe":"CWE-863","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87591","date":"2026-10-09","epss":0.00264,"percentile":0.1686}],"risk":0.1518,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/543938457"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87591","description":"Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87628","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87628","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87628","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87628","date":"2026-10-09","epss":0.00191,"percentile":0.08014}],"risk":0.15089,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/553770012"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87628","description":"Use after free in Cast in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Critical)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87578","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87578","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87578","cwe":"CWE-416","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87578","date":"2026-10-09","epss":0.00191,"percentile":0.08013}],"risk":0.15089,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/517371367"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87578","description":"Use after free in Receiver in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106230","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106230","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106230","cwe":"CWE-706","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106230","date":"2026-10-09","epss":0.00291,"percentile":0.19854}],"risk":0.149865,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/520507737"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106230","description":"Incorrect reference resolution in Offline in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87447","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87447","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87447","cwe":"CWE-863","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87447","date":"2026-10-09","epss":0.0026,"percentile":0.16277}],"risk":0.14949999999999997,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/503464711"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87447","description":"Incorrect authorization in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106222","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106222","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106222","cwe":"CWE-863","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106222","date":"2026-10-09","epss":0.00273,"percentile":0.18092}],"risk":0.148785,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/496623893"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106222","description":"Incorrect authorization in Sync in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95346","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95346","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95346","cwe":"CWE-451","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95346","date":"2026-10-09","epss":0.00302,"percentile":0.21085}],"risk":0.14798,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/514059630"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95346","description":"UI misrepresentation in Chromoting in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via crafted network traffic. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"9e813491f50ba632","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-65706","versionConstraint":">= 3.0, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-65706","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-65706","cwe":"CWE-131","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-65706","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-65706","date":"2026-10-09","epss":0.00187,"percentile":0.07642}],"risk":0.1463275,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/a7e38b617b32f996beaa371bbf04b39907d7a527","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23779","https://www.vulncheck.com/advisories/ffmpeg-vf-swaprect-out-of-bounds-write-via-nv12-frame-processing"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-65706","description":"FFmpeg versions 3.0 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_swaprect video filter that allows attackers to corrupt heap memory by supplying a crafted NV12 video frame with odd width dimensions. The filter_frame() function reuses a temporary row buffer sized for plane 0's single-byte pixel step across all planes, causing an 18-byte memcpy into a 17-byte heap allocation when processing the two-byte-per-sample interleaved chroma plane of a 17x16 NV12 frame, resulting in heap corruption and process crash with potential for code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"d07d7332fd90e2f5","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-65706","versionConstraint":">= 3.0, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-65706","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-65706","cwe":"CWE-131","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-65706","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-65706","date":"2026-10-09","epss":0.00187,"percentile":0.07642}],"risk":0.1463275,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/a7e38b617b32f996beaa371bbf04b39907d7a527","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23779","https://www.vulncheck.com/advisories/ffmpeg-vf-swaprect-out-of-bounds-write-via-nv12-frame-processing"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-65706","description":"FFmpeg versions 3.0 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_swaprect video filter that allows attackers to corrupt heap memory by supplying a crafted NV12 video frame with odd width dimensions. The filter_frame() function reuses a temporary row buffer sized for plane 0's single-byte pixel step across all planes, causing an 18-byte memcpy into a 17-byte heap allocation when processing the two-byte-per-sample interleaved chroma plane of a 17x16 NV12 frame, resulting in heap corruption and process crash with potential for code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"50075ec0b9beb4e7","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-65706","versionConstraint":">= 3.0, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-65706","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-65706","cwe":"CWE-131","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-65706","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-65706","date":"2026-10-09","epss":0.00187,"percentile":0.07642}],"risk":0.1463275,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/a7e38b617b32f996beaa371bbf04b39907d7a527","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23779","https://www.vulncheck.com/advisories/ffmpeg-vf-swaprect-out-of-bounds-write-via-nv12-frame-processing"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-65706","description":"FFmpeg versions 3.0 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_swaprect video filter that allows attackers to corrupt heap memory by supplying a crafted NV12 video frame with odd width dimensions. The filter_frame() function reuses a temporary row buffer sized for plane 0's single-byte pixel step across all planes, causing an 18-byte memcpy into a 17-byte heap allocation when processing the two-byte-per-sample interleaved chroma plane of a 17x16 NV12 frame, resulting in heap corruption and process crash with potential for code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"15f575ddc365a154","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-65706","versionConstraint":">= 3.0, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-65706","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-65706","cwe":"CWE-131","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-65706","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-65706","date":"2026-10-09","epss":0.00187,"percentile":0.07642}],"risk":0.1463275,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/a7e38b617b32f996beaa371bbf04b39907d7a527","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23779","https://www.vulncheck.com/advisories/ffmpeg-vf-swaprect-out-of-bounds-write-via-nv12-frame-processing"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-65706","description":"FFmpeg versions 3.0 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_swaprect video filter that allows attackers to corrupt heap memory by supplying a crafted NV12 video frame with odd width dimensions. The filter_frame() function reuses a temporary row buffer sized for plane 0's single-byte pixel step across all planes, causing an 18-byte memcpy into a 17-byte heap allocation when processing the two-byte-per-sample interleaved chroma plane of a 17x16 NV12 frame, resulting in heap corruption and process crash with potential for code execution."},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95367","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95367","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95367","cwe":"CWE-200","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95367","date":"2026-10-09","epss":0.00283,"percentile":0.19115}],"risk":0.145745,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/514524620"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95367","description":"Information leak in DataTransfer in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87435","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87435","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87435","cwe":"CWE-200","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87435","date":"2026-10-09","epss":0.00283,"percentile":0.1908}],"risk":0.145745,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/533070113"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87435","description":"Information leak in ControlledFrame in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87439","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87439","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87439","cwe":"CWE-200","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87439","date":"2026-10-09","epss":0.00283,"percentile":0.1908}],"risk":0.145745,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/517415433"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87439","description":"Information leak in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87566","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87566","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87566","cwe":"CWE-203","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87566","date":"2026-10-09","epss":0.00283,"percentile":0.1908}],"risk":0.145745,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/540021850"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87566","description":"Observable discrepancy in Layout in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87518","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87518","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87518","cwe":"CWE-203","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87518","date":"2026-10-09","epss":0.00283,"percentile":0.19079}],"risk":0.145745,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/517917560"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87518","description":"Observable discrepancy in Safebrowsing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-103627","versionConstraint":"< 154.0.8037.97 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-103627","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-103627","cwe":"CWE-200","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-103627","date":"2026-10-09","epss":0.00247,"percentile":0.14698}],"risk":0.14202499999999998,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop.html","https://issues.chromium.org/issues/553147154"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-103627","description":"Information leak in SVG in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87441","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87441","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87441","cwe":"CWE-862","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87441","date":"2026-10-09","epss":0.00246,"percentile":0.14575}],"risk":0.14145,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/514556469"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87441","description":"Missing authorization in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"5b157b98b5ac0132","cpes":["cpe:2.3:a:golang:networking:v0.57.0:*:*:*:*:go:*:*","cpe:2.3:a:golang:net:v0.57.0:*:*:*:*:go:*:*"],"name":"golang.org/x/net","purl":"pkg:golang/golang.org/x/net@v0.57.0","type":"go-module","version":"v0.57.0","language":"go","licenses":[],"metadata":{"h1Digest":"h1:K5+3DljvIuDG9/Jv9rvyMywYNFCQ9RSUY6OOTTkT+tE=","mainModule":"k6","architecture":"amd64","goCompiledVersion":"go1.26.6"},"locations":[{"path":"/usr/libexec/sm-k6/k6-v1","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/usr/libexec/sm-k6/k6-v1","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.60.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6610","versionConstraint":"<0.60.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/net","version":"v0.57.0"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6610","fix":{"state":"fixed","versions":["0.60.0"],"available":[{"date":"2026-10-08","kind":"release","version":"0.60.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78660","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78660","date":"2026-10-09","epss":0.00188,"percentile":0.07727}],"risk":0.14100000000000001,"urls":["https://go.dev/cl/836385","https://go.dev/issue/81115","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/835145","description":"Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a reverse proxy. If the HTTP/1 client also does not behave strictly enough, this can result in response smuggling."},"relatedVulnerabilities":[{"id":"CVE-2026-78660","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78660","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78660","date":"2026-10-09","epss":0.00188,"percentile":0.07727}],"urls":["https://go.dev/cl/835145","https://go.dev/cl/836385","https://go.dev/issue/81115","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6610"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78660","description":"Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a reverse proxy. If the HTTP/1 client also does not behave strictly enough, this can result in response smuggling."}]},{"artifact":{"id":"035636176708beac","cpes":["cpe:2.3:a:golang:networking:v0.58.0:*:*:*:*:go:*:*","cpe:2.3:a:golang:net:v0.58.0:*:*:*:*:go:*:*"],"name":"golang.org/x/net","purl":"pkg:golang/golang.org/x/net@v0.58.0","type":"go-module","version":"v0.58.0","language":"go","licenses":[],"metadata":{"h1Digest":"h1:ynWG7rqYi4ccpTEuPZ2QGWHktVEM9DMCj9yzDE0Q7To=","mainModule":"k6","architecture":"amd64","goCompiledVersion":"go1.26.7"},"locations":[{"path":"/usr/libexec/sm-k6/k6-v2","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/usr/libexec/sm-k6/k6-v2","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.60.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6610","versionConstraint":"<0.60.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/net","version":"v0.58.0"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6610","fix":{"state":"fixed","versions":["0.60.0"],"available":[{"date":"2026-10-08","kind":"release","version":"0.60.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78660","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78660","date":"2026-10-09","epss":0.00188,"percentile":0.07727}],"risk":0.14100000000000001,"urls":["https://go.dev/cl/836385","https://go.dev/issue/81115","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/835145","description":"Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a reverse proxy. If the HTTP/1 client also does not behave strictly enough, this can result in response smuggling."},"relatedVulnerabilities":[{"id":"CVE-2026-78660","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78660","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78660","date":"2026-10-09","epss":0.00188,"percentile":0.07727}],"urls":["https://go.dev/cl/835145","https://go.dev/cl/836385","https://go.dev/issue/81115","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6610"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78660","description":"Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a reverse proxy. If the HTTP/1 client also does not behave strictly enough, this can result in response smuggling."}]},{"artifact":{"id":"178f5d911424f514","cpes":["cpe:2.3:a:golang:networking:v0.59.0:*:*:*:*:go:*:*","cpe:2.3:a:golang:net:v0.59.0:*:*:*:*:go:*:*"],"name":"golang.org/x/net","purl":"pkg:golang/golang.org/x/net@v0.59.0","type":"go-module","version":"v0.59.0","language":"go","licenses":[],"metadata":{"h1Digest":"h1:5zfYln+w5XCxwrnMMJPufRgNoXEaGxl0wo5GqPXyues=","mainModule":"github.com/grafana/synthetic-monitoring-agent","architecture":"amd64","goCompiledVersion":"go1.26.7"},"locations":[{"path":"/usr/local/bin/synthetic-monitoring-agent","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/usr/local/bin/synthetic-monitoring-agent","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.60.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6610","versionConstraint":"<0.60.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/net","version":"v0.59.0"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6610","fix":{"state":"fixed","versions":["0.60.0"],"available":[{"date":"2026-10-08","kind":"release","version":"0.60.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78660","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78660","date":"2026-10-09","epss":0.00188,"percentile":0.07727}],"risk":0.14100000000000001,"urls":["https://go.dev/cl/836385","https://go.dev/issue/81115","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/835145","description":"Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a reverse proxy. If the HTTP/1 client also does not behave strictly enough, this can result in response smuggling."},"relatedVulnerabilities":[{"id":"CVE-2026-78660","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78660","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78660","date":"2026-10-09","epss":0.00188,"percentile":0.07727}],"urls":["https://go.dev/cl/835145","https://go.dev/cl/836385","https://go.dev/issue/81115","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6610"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78660","description":"Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a reverse proxy. If the HTTP/1 client also does not behave strictly enough, this can result in response smuggling."}]},{"artifact":{"id":"233a0e4c47ab9bff","cpes":["cpe:2.3:a:golang:go:1.26.6:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.26.6","type":"go-module","version":"go1.26.6","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.26.6"},"locations":[{"path":"/usr/libexec/sm-k6/k6-v1","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/usr/libexec/sm-k6/k6-v1","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.26.9"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6610","versionConstraint":"<1.26.9 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.26.6"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6610","fix":{"state":"fixed","versions":["1.26.9"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78660","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78660","date":"2026-10-09","epss":0.00188,"percentile":0.07727}],"risk":0.14100000000000001,"urls":["https://go.dev/cl/836385","https://go.dev/issue/81115","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/835145","description":"Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a reverse proxy. If the HTTP/1 client also does not behave strictly enough, this can result in response smuggling."},"relatedVulnerabilities":[{"id":"CVE-2026-78660","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78660","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78660","date":"2026-10-09","epss":0.00188,"percentile":0.07727}],"urls":["https://go.dev/cl/835145","https://go.dev/cl/836385","https://go.dev/issue/81115","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6610"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78660","description":"Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a reverse proxy. If the HTTP/1 client also does not behave strictly enough, this can result in response smuggling."}]},{"artifact":{"id":"fe444b5362ab73cd","cpes":["cpe:2.3:a:golang:go:1.26.7:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.26.7","type":"go-module","version":"go1.26.7","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.26.7"},"locations":[{"path":"/usr/local/bin/synthetic-monitoring-agent","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/usr/local/bin/synthetic-monitoring-agent","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.26.9"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6610","versionConstraint":"<1.26.9 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.26.7"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6610","fix":{"state":"fixed","versions":["1.26.9"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78660","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78660","date":"2026-10-09","epss":0.00188,"percentile":0.07727}],"risk":0.14100000000000001,"urls":["https://go.dev/cl/836385","https://go.dev/issue/81115","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/835145","description":"Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a reverse proxy. If the HTTP/1 client also does not behave strictly enough, this can result in response smuggling."},"relatedVulnerabilities":[{"id":"CVE-2026-78660","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78660","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78660","date":"2026-10-09","epss":0.00188,"percentile":0.07727}],"urls":["https://go.dev/cl/835145","https://go.dev/cl/836385","https://go.dev/issue/81115","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6610"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78660","description":"Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a reverse proxy. If the HTTP/1 client also does not behave strictly enough, this can result in response smuggling."}]},{"artifact":{"id":"7bc26ab97a58f111","cpes":["cpe:2.3:a:golang:go:1.26.7:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.26.7","type":"go-module","version":"go1.26.7","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.26.7"},"locations":[{"path":"/usr/libexec/sm-k6/k6-v2","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/usr/libexec/sm-k6/k6-v2","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.26.9"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6610","versionConstraint":"<1.26.9 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.26.7"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6610","fix":{"state":"fixed","versions":["1.26.9"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78660","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78660","date":"2026-10-09","epss":0.00188,"percentile":0.07727}],"risk":0.14100000000000001,"urls":["https://go.dev/cl/836385","https://go.dev/issue/81115","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/835145","description":"Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a reverse proxy. If the HTTP/1 client also does not behave strictly enough, this can result in response smuggling."},"relatedVulnerabilities":[{"id":"CVE-2026-78660","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78660","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78660","date":"2026-10-09","epss":0.00188,"percentile":0.07727}],"urls":["https://go.dev/cl/835145","https://go.dev/cl/836385","https://go.dev/issue/81115","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6610"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78660","description":"Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a reverse proxy. If the HTTP/1 client also does not behave strictly enough, this can result in response smuggling."}]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106384","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106384","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106384","cwe":"CWE-862","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106384","date":"2026-10-09","epss":0.00245,"percentile":0.14488}],"risk":0.14087499999999997,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/554348119"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106384","description":"Missing authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"9e813491f50ba632","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-65705","versionConstraint":">= 3.4, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-65705","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-65705","cwe":"CWE-131","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-65705","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-65705","date":"2026-10-09","epss":0.00187,"percentile":0.07642}],"risk":0.1407175,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/f186c50cf53aec20e9a29059cb22ca3f2d59201c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23780","https://www.vulncheck.com/advisories/ffmpeg-vf-floodfill-out-of-bounds-write-via-filter-frame"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-65705","description":"FFmpeg versions 3.4 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_floodfill video filter that allows attackers to corrupt heap memory by supplying a dynamically sized video stream with filtergraph reinitialization disabled via -reinit_filter 0. When config_input() allocates the points traversal stack based on initial frame dimensions and a subsequent larger frame is processed, filter_frame() performs flood-fill neighbor pushes beyond the original allocation boundary, resulting in heap corruption and process crash with potential for code execution depending on heap layout and process hardening."},"relatedVulnerabilities":[]},{"artifact":{"id":"d07d7332fd90e2f5","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-65705","versionConstraint":">= 3.4, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-65705","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-65705","cwe":"CWE-131","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-65705","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-65705","date":"2026-10-09","epss":0.00187,"percentile":0.07642}],"risk":0.1407175,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/f186c50cf53aec20e9a29059cb22ca3f2d59201c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23780","https://www.vulncheck.com/advisories/ffmpeg-vf-floodfill-out-of-bounds-write-via-filter-frame"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-65705","description":"FFmpeg versions 3.4 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_floodfill video filter that allows attackers to corrupt heap memory by supplying a dynamically sized video stream with filtergraph reinitialization disabled via -reinit_filter 0. When config_input() allocates the points traversal stack based on initial frame dimensions and a subsequent larger frame is processed, filter_frame() performs flood-fill neighbor pushes beyond the original allocation boundary, resulting in heap corruption and process crash with potential for code execution depending on heap layout and process hardening."},"relatedVulnerabilities":[]},{"artifact":{"id":"50075ec0b9beb4e7","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-65705","versionConstraint":">= 3.4, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-65705","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-65705","cwe":"CWE-131","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-65705","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-65705","date":"2026-10-09","epss":0.00187,"percentile":0.07642}],"risk":0.1407175,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/f186c50cf53aec20e9a29059cb22ca3f2d59201c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23780","https://www.vulncheck.com/advisories/ffmpeg-vf-floodfill-out-of-bounds-write-via-filter-frame"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-65705","description":"FFmpeg versions 3.4 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_floodfill video filter that allows attackers to corrupt heap memory by supplying a dynamically sized video stream with filtergraph reinitialization disabled via -reinit_filter 0. When config_input() allocates the points traversal stack based on initial frame dimensions and a subsequent larger frame is processed, filter_frame() performs flood-fill neighbor pushes beyond the original allocation boundary, resulting in heap corruption and process crash with potential for code execution depending on heap layout and process hardening."},"relatedVulnerabilities":[]},{"artifact":{"id":"15f575ddc365a154","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-65705","versionConstraint":">= 3.4, <= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-65705","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-65705","cwe":"CWE-131","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-65705","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-65705","date":"2026-10-09","epss":0.00187,"percentile":0.07642}],"risk":0.1407175,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/f186c50cf53aec20e9a29059cb22ca3f2d59201c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23780","https://www.vulncheck.com/advisories/ffmpeg-vf-floodfill-out-of-bounds-write-via-filter-frame"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-65705","description":"FFmpeg versions 3.4 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_floodfill video filter that allows attackers to corrupt heap memory by supplying a dynamically sized video stream with filtergraph reinitialization disabled via -reinit_filter 0. When config_input() allocates the points traversal stack based on initial frame dimensions and a subsequent larger frame is processed, filter_frame() performs flood-fill neighbor pushes beyond the original allocation boundary, resulting in heap corruption and process crash with potential for code execution depending on heap layout and process hardening."},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-102310","versionConstraint":"< 154.0.8037.92 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-102310","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102310","cwe":"CWE-862","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-102310","date":"2026-10-09","epss":0.00244,"percentile":0.1432}],"risk":0.14029999999999998,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01807488085.html","https://issues.chromium.org/issues/477726837"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102310","description":"Missing authorization in Payments in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87453","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87453","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87453","cwe":"CWE-441","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87453","date":"2026-10-09","epss":0.00272,"percentile":0.18012}],"risk":0.14008,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/495444970"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87453","description":"Confused deputy in BackgroundFetch in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87605","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87605","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87605","cwe":"CWE-862","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87605","date":"2026-10-09","epss":0.00272,"percentile":0.18012}],"risk":0.14008,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/533084499"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87605","description":"Missing authorization in Contacts in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87594","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87594","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87594","cwe":"CWE-863","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87594","date":"2026-10-09","epss":0.00272,"percentile":0.18011}],"risk":0.14008,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/517732336"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87594","description":"Incorrect authorization in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c1fed726b9e0ccb7","cpes":["cpe:2.3:a:libcrypto3:libcrypto3:3.5.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto3:libcrypto:3.5.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto3:3.5.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto:3.5.8-r0:*:*:*:*:*:*:*"],"name":"libcrypto3","purl":"pkg:apk/alpine/libcrypto3@3.5.8-r0?arch=x86_64&distro=alpine-3.24.2&upstream=openssl","type":"apk","version":"3.5.8-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/ssl"},{"path":"/etc/ssl/ct_log_list.cnf"},{"path":"/etc/ssl/ct_log_list.cnf.dist"},{"path":"/etc/ssl/openssl.cnf"},{"path":"/etc/ssl/openssl.cnf.dist"},{"path":"/etc/ssl/certs"},{"path":"/etc/ssl/private"},{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcrypto.so.3"},{"path":"/usr/lib/engines-3"},{"path":"/usr/lib/engines-3/afalg.so"},{"path":"/usr/lib/engines-3/capi.so"},{"path":"/usr/lib/engines-3/loader_attic.so"},{"path":"/usr/lib/engines-3/padlock.so"},{"path":"/usr/lib/ossl-modules"},{"path":"/usr/lib/ossl-modules/legacy.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-35189","versionConstraint":">= 1.0.2, < 1.0.2zs||>= 1.1.1, < 1.1.1zj||>= 3.0.0, < 3.0.23||>= 3.4.0, < 3.4.8||>= 3.5.0, < 3.5.9||>= 3.6.0, < 3.6.5||>= 4.0.0, < 4.0.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.5.8:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.5.8-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-35189","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-35189","cwe":"CWE-770","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-35189","date":"2026-10-09","epss":0.00267,"percentile":0.173}],"risk":0.13750500000000002,"urls":["https://github.com/openssl/openssl/commit/2b93c73b2c70ddc4c61c5e4bfaaa6bd71379eb84","https://github.com/openssl/openssl/commit/3842516cc15e8b2cf55747011045e77547e71d89","https://github.com/openssl/openssl/commit/8e0efc7549b7ff8246d40e585e3fd604f728473f","https://github.com/openssl/openssl/commit/c72ae182cac17a82e4246c6ecd4e9c4ec3586ec9","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-35189","description":"Issue summary: A certificate with many nameRelativeToCRLIssuer CRL\ndistribution points causes disproportionate heap growth when OpenSSL caches\nX.509 extensions.\n\nImpact summary: Receiving a crafted certificate from a malicious peer can lead\nto significant memory pressure and possible Denial of Service in clients or\nin servers that solicit client certificates.\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: A certificate or a set of certificates that fits under the limit for\nsize of certificates accepted from the peer (~100 KiB) can result in allocation\nof several hundred MiB of resident memory on the receiving side\nduring a normal TLS handshake.  This may be enough to crash the client or\nserver, if multiple concurrent connections lead to similarly large memory\nallocations.\n\nThe fix postpones processing of the CRL distribution points extensions in\ncertificates to the time when the processed value is required for CRL processing.\nThis avoids keeping large memory allocations for a long time when such\ncertificates are received.\n\nFIPS impact: no\nThe affected code is outside the FIPS module boundary."},"relatedVulnerabilities":[]},{"artifact":{"id":"269544be9368a131","cpes":["cpe:2.3:a:libssl3:libssl3:3.5.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl3:libssl:3.5.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl3:3.5.8-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl:3.5.8-r0:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:apk/alpine/libssl3@3.5.8-r0?arch=x86_64&distro=alpine-3.24.2&upstream=openssl","type":"apk","version":"3.5.8-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libssl.so.3"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-35189","versionConstraint":">= 1.0.2, < 1.0.2zs||>= 1.1.1, < 1.1.1zj||>= 3.0.0, < 3.0.23||>= 3.4.0, < 3.4.8||>= 3.5.0, < 3.5.9||>= 3.6.0, < 3.6.5||>= 4.0.0, < 4.0.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.5.8:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.5.8-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-35189","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-35189","cwe":"CWE-770","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-35189","date":"2026-10-09","epss":0.00267,"percentile":0.173}],"risk":0.13750500000000002,"urls":["https://github.com/openssl/openssl/commit/2b93c73b2c70ddc4c61c5e4bfaaa6bd71379eb84","https://github.com/openssl/openssl/commit/3842516cc15e8b2cf55747011045e77547e71d89","https://github.com/openssl/openssl/commit/8e0efc7549b7ff8246d40e585e3fd604f728473f","https://github.com/openssl/openssl/commit/c72ae182cac17a82e4246c6ecd4e9c4ec3586ec9","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-35189","description":"Issue summary: A certificate with many nameRelativeToCRLIssuer CRL\ndistribution points causes disproportionate heap growth when OpenSSL caches\nX.509 extensions.\n\nImpact summary: Receiving a crafted certificate from a malicious peer can lead\nto significant memory pressure and possible Denial of Service in clients or\nin servers that solicit client certificates.\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: A certificate or a set of certificates that fits under the limit for\nsize of certificates accepted from the peer (~100 KiB) can result in allocation\nof several hundred MiB of resident memory on the receiving side\nduring a normal TLS handshake.  This may be enough to crash the client or\nserver, if multiple concurrent connections lead to similarly large memory\nallocations.\n\nThe fix postpones processing of the CRL distribution points extensions in\ncertificates to the time when the processed value is required for CRL processing.\nThis avoids keeping large memory allocations for a long time when such\ncertificates are received.\n\nFIPS impact: no\nThe affected code is outside the FIPS module boundary."},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106386","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106386","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106386","cwe":"CWE-908","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106386","date":"2026-10-09","epss":0.00239,"percentile":0.13737}],"risk":0.137425,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/553156221"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106386","description":"Uninitialized resource in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106261","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106261","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106261","cwe":"CWE-908","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106261","date":"2026-10-09","epss":0.00239,"percentile":0.13702}],"risk":0.137425,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/504638005"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106261","description":"Uninitialized resource in Video in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106223","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106223","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N","metrics":{"baseScore":4.7,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106223","cwe":"CWE-908","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106223","date":"2026-10-09","epss":0.00283,"percentile":0.19066}],"risk":0.137255,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/501633302"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106223","description":"Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95293","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95293","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N","metrics":{"baseScore":4.7,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95293","cwe":"CWE-908","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95293","date":"2026-10-09","epss":0.00283,"percentile":0.19066}],"risk":0.137255,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/550953039"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95293","description":"Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95332","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95332","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N","metrics":{"baseScore":4.7,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95332","cwe":"CWE-457","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95332","date":"2026-10-09","epss":0.00283,"percentile":0.19066}],"risk":0.137255,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/546639650"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95332","description":"Use of uninitialized variable in Tint in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87555","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87555","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N","metrics":{"baseScore":4.7,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87555","cwe":"CWE-908","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87555","date":"2026-10-09","epss":0.00282,"percentile":0.19036}],"risk":0.13677,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/517337579"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87555","description":"Uninitialized resource in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106280","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106280","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106280","cwe":"CWE-863","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106280","date":"2026-10-09","epss":0.00237,"percentile":0.1359}],"risk":0.136275,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/517366426"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106280","description":"Incorrect authorization in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106289","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106289","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106289","cwe":"CWE-862","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106289","date":"2026-10-09","epss":0.00237,"percentile":0.1359}],"risk":0.136275,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/517700327"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106289","description":"Missing authorization in FedCM in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"233a0e4c47ab9bff","cpes":["cpe:2.3:a:golang:go:1.26.6:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.26.6","type":"go-module","version":"go1.26.6","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.26.6"},"locations":[{"path":"/usr/libexec/sm-k6/k6-v1","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/usr/libexec/sm-k6/k6-v1","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.26.9"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6613","versionConstraint":"<1.26.9||>=1.27.0-0,<1.27.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.26.6"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6613","fix":{"state":"fixed","versions":["1.26.9","1.27.2"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"},{"date":"2026-10-08","kind":"release","version":"1.27.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94439","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94439","date":"2026-10-09","epss":0.00181,"percentile":0.0704}],"risk":0.13575,"urls":["https://go.dev/issue/81744","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847311","description":"When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. Since a 2xx response to an HTTP/1 CONNECT converts the connection into a tunnel, the server should not treat the connection as continuing to contain HTTP.\n\nThe impact of this misbehavior is mostly limited to potential request smuggling, where an intermediate proxy considers the data on the connection to be tunneled and the server considers it to be HTTP."},"relatedVulnerabilities":[{"id":"CVE-2026-94439","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94439","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94439","date":"2026-10-09","epss":0.00181,"percentile":0.0704}],"urls":["https://go.dev/cl/847311","https://go.dev/issue/81744","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6613"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-94439","description":"When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. Since a 2xx response to an HTTP/1 CONNECT converts the connection into a tunnel, the server should not treat the connection as continuing to contain HTTP. The impact of this misbehavior is mostly limited to potential request smuggling, where an intermediate proxy considers the data on the connection to be tunneled and the server considers it to be HTTP."}]},{"artifact":{"id":"7bc26ab97a58f111","cpes":["cpe:2.3:a:golang:go:1.26.7:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.26.7","type":"go-module","version":"go1.26.7","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.26.7"},"locations":[{"path":"/usr/libexec/sm-k6/k6-v2","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/usr/libexec/sm-k6/k6-v2","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.26.9"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6613","versionConstraint":"<1.26.9||>=1.27.0-0,<1.27.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.26.7"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6613","fix":{"state":"fixed","versions":["1.26.9","1.27.2"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"},{"date":"2026-10-08","kind":"release","version":"1.27.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94439","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94439","date":"2026-10-09","epss":0.00181,"percentile":0.0704}],"risk":0.13575,"urls":["https://go.dev/issue/81744","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847311","description":"When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. Since a 2xx response to an HTTP/1 CONNECT converts the connection into a tunnel, the server should not treat the connection as continuing to contain HTTP.\n\nThe impact of this misbehavior is mostly limited to potential request smuggling, where an intermediate proxy considers the data on the connection to be tunneled and the server considers it to be HTTP."},"relatedVulnerabilities":[{"id":"CVE-2026-94439","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94439","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94439","date":"2026-10-09","epss":0.00181,"percentile":0.0704}],"urls":["https://go.dev/cl/847311","https://go.dev/issue/81744","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6613"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-94439","description":"When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. Since a 2xx response to an HTTP/1 CONNECT converts the connection into a tunnel, the server should not treat the connection as continuing to contain HTTP. The impact of this misbehavior is mostly limited to potential request smuggling, where an intermediate proxy considers the data on the connection to be tunneled and the server considers it to be HTTP."}]},{"artifact":{"id":"fe444b5362ab73cd","cpes":["cpe:2.3:a:golang:go:1.26.7:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.26.7","type":"go-module","version":"go1.26.7","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.26.7"},"locations":[{"path":"/usr/local/bin/synthetic-monitoring-agent","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/usr/local/bin/synthetic-monitoring-agent","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.26.9"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6613","versionConstraint":"<1.26.9||>=1.27.0-0,<1.27.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.26.7"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6613","fix":{"state":"fixed","versions":["1.26.9","1.27.2"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"},{"date":"2026-10-08","kind":"release","version":"1.27.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94439","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94439","date":"2026-10-09","epss":0.00181,"percentile":0.0704}],"risk":0.13575,"urls":["https://go.dev/issue/81744","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847311","description":"When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. Since a 2xx response to an HTTP/1 CONNECT converts the connection into a tunnel, the server should not treat the connection as continuing to contain HTTP.\n\nThe impact of this misbehavior is mostly limited to potential request smuggling, where an intermediate proxy considers the data on the connection to be tunneled and the server considers it to be HTTP."},"relatedVulnerabilities":[{"id":"CVE-2026-94439","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94439","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94439","date":"2026-10-09","epss":0.00181,"percentile":0.0704}],"urls":["https://go.dev/cl/847311","https://go.dev/issue/81744","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6613"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-94439","description":"When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. Since a 2xx response to an HTTP/1 CONNECT converts the connection into a tunnel, the server should not treat the connection as continuing to contain HTTP. The impact of this misbehavior is mostly limited to potential request smuggling, where an intermediate proxy considers the data on the connection to be tunneled and the server considers it to be HTTP."}]},{"artifact":{"id":"233a0e4c47ab9bff","cpes":["cpe:2.3:a:golang:go:1.26.6:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.26.6","type":"go-module","version":"go1.26.6","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.26.6"},"locations":[{"path":"/usr/libexec/sm-k6/k6-v1","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/usr/libexec/sm-k6/k6-v1","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.26.9"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6608","versionConstraint":"<1.26.9||>=1.27.0-0,<1.27.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.26.6"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6608","fix":{"state":"fixed","versions":["1.26.9","1.27.2"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"},{"date":"2026-10-08","kind":"release","version":"1.27.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94440","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94440","date":"2026-10-09","epss":0.00181,"percentile":0.07025}],"risk":0.13575,"urls":["https://go.dev/issue/81741","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847307","description":"Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes."},"relatedVulnerabilities":[{"id":"CVE-2026-94440","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94440","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94440","date":"2026-10-09","epss":0.00181,"percentile":0.07025}],"urls":["https://go.dev/cl/847307","https://go.dev/issue/81741","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6608"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-94440","description":"Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes."}]},{"artifact":{"id":"7bc26ab97a58f111","cpes":["cpe:2.3:a:golang:go:1.26.7:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.26.7","type":"go-module","version":"go1.26.7","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.26.7"},"locations":[{"path":"/usr/libexec/sm-k6/k6-v2","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/usr/libexec/sm-k6/k6-v2","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.26.9"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6608","versionConstraint":"<1.26.9||>=1.27.0-0,<1.27.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.26.7"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6608","fix":{"state":"fixed","versions":["1.26.9","1.27.2"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"},{"date":"2026-10-08","kind":"release","version":"1.27.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94440","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94440","date":"2026-10-09","epss":0.00181,"percentile":0.07025}],"risk":0.13575,"urls":["https://go.dev/issue/81741","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847307","description":"Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes."},"relatedVulnerabilities":[{"id":"CVE-2026-94440","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94440","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94440","date":"2026-10-09","epss":0.00181,"percentile":0.07025}],"urls":["https://go.dev/cl/847307","https://go.dev/issue/81741","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6608"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-94440","description":"Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes."}]},{"artifact":{"id":"fe444b5362ab73cd","cpes":["cpe:2.3:a:golang:go:1.26.7:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.26.7","type":"go-module","version":"go1.26.7","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.26.7"},"locations":[{"path":"/usr/local/bin/synthetic-monitoring-agent","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/usr/local/bin/synthetic-monitoring-agent","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.26.9"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6608","versionConstraint":"<1.26.9||>=1.27.0-0,<1.27.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.26.7"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6608","fix":{"state":"fixed","versions":["1.26.9","1.27.2"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"},{"date":"2026-10-08","kind":"release","version":"1.27.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94440","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94440","date":"2026-10-09","epss":0.00181,"percentile":0.07025}],"risk":0.13575,"urls":["https://go.dev/issue/81741","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847307","description":"Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes."},"relatedVulnerabilities":[{"id":"CVE-2026-94440","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94440","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94440","date":"2026-10-09","epss":0.00181,"percentile":0.07025}],"urls":["https://go.dev/cl/847307","https://go.dev/issue/81741","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6608"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-94440","description":"Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes."}]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-102320","versionConstraint":"< 154.0.8037.92 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-102320","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102320","cwe":"CWE-862","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-102320","date":"2026-10-09","epss":0.00234,"percentile":0.13153}],"risk":0.13455,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01807488085.html","https://issues.chromium.org/issues/554038924"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102320","description":"Missing authorization in CORS in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-102330","versionConstraint":"< 154.0.8037.92 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-102330","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102330","cwe":"CWE-863","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-102330","date":"2026-10-09","epss":0.00234,"percentile":0.13153}],"risk":0.13455,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01807488085.html","https://issues.chromium.org/issues/498793976"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102330","description":"Incorrect authorization in SiteIsolation in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-91720","versionConstraint":"< 153.0.8010.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-91720","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N","metrics":{"baseScore":4.7,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91720","cwe":"CWE-908","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-91720","date":"2026-10-09","epss":0.00277,"percentile":0.18507}],"risk":0.134345,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0541751186.html","https://issues.chromium.org/issues/523470135"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91720","description":"Uninitialized resource in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-102307","versionConstraint":"< 154.0.8037.92 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-102307","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N","metrics":{"baseScore":4.7,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102307","cwe":"CWE-908","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-102307","date":"2026-10-09","epss":0.00277,"percentile":0.18487}],"risk":0.134345,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01807488085.html","https://issues.chromium.org/issues/556959073"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102307","description":"Uninitialized resource in Dawn in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"233a0e4c47ab9bff","cpes":["cpe:2.3:a:golang:go:1.26.6:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.26.6","type":"go-module","version":"go1.26.6","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.26.6"},"locations":[{"path":"/usr/libexec/sm-k6/k6-v1","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/usr/libexec/sm-k6/k6-v1","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.26.9"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6607","versionConstraint":"<1.26.9||>=1.27.0-0,<1.27.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.26.6"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6607","fix":{"state":"fixed","versions":["1.26.9","1.27.2"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"},{"date":"2026-10-08","kind":"release","version":"1.27.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-97031","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-97031","date":"2026-10-09","epss":0.00179,"percentile":0.06828}],"risk":0.13424999999999998,"urls":["https://go.dev/issue/81855","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847312","description":"Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying multiple references.\n\nWe now reject these as malformed and curb the memory amplification vector as a result."},"relatedVulnerabilities":[{"id":"CVE-2026-97031","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-97031","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-97031","date":"2026-10-09","epss":0.00179,"percentile":0.06828}],"urls":["https://go.dev/cl/847312","https://go.dev/issue/81855","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6607"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-97031","description":"Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying multiple references. We now reject these as malformed and curb the memory amplification vector as a result."}]},{"artifact":{"id":"7bc26ab97a58f111","cpes":["cpe:2.3:a:golang:go:1.26.7:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.26.7","type":"go-module","version":"go1.26.7","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.26.7"},"locations":[{"path":"/usr/libexec/sm-k6/k6-v2","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/usr/libexec/sm-k6/k6-v2","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.26.9"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6607","versionConstraint":"<1.26.9||>=1.27.0-0,<1.27.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.26.7"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6607","fix":{"state":"fixed","versions":["1.26.9","1.27.2"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"},{"date":"2026-10-08","kind":"release","version":"1.27.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-97031","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-97031","date":"2026-10-09","epss":0.00179,"percentile":0.06828}],"risk":0.13424999999999998,"urls":["https://go.dev/issue/81855","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847312","description":"Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying multiple references.\n\nWe now reject these as malformed and curb the memory amplification vector as a result."},"relatedVulnerabilities":[{"id":"CVE-2026-97031","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-97031","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-97031","date":"2026-10-09","epss":0.00179,"percentile":0.06828}],"urls":["https://go.dev/cl/847312","https://go.dev/issue/81855","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6607"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-97031","description":"Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying multiple references. We now reject these as malformed and curb the memory amplification vector as a result."}]},{"artifact":{"id":"fe444b5362ab73cd","cpes":["cpe:2.3:a:golang:go:1.26.7:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.26.7","type":"go-module","version":"go1.26.7","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.26.7"},"locations":[{"path":"/usr/local/bin/synthetic-monitoring-agent","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/usr/local/bin/synthetic-monitoring-agent","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.26.9"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6607","versionConstraint":"<1.26.9||>=1.27.0-0,<1.27.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.26.7"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6607","fix":{"state":"fixed","versions":["1.26.9","1.27.2"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"},{"date":"2026-10-08","kind":"release","version":"1.27.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-97031","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-97031","date":"2026-10-09","epss":0.00179,"percentile":0.06828}],"risk":0.13424999999999998,"urls":["https://go.dev/issue/81855","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847312","description":"Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying multiple references.\n\nWe now reject these as malformed and curb the memory amplification vector as a result."},"relatedVulnerabilities":[{"id":"CVE-2026-97031","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-97031","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-97031","date":"2026-10-09","epss":0.00179,"percentile":0.06828}],"urls":["https://go.dev/cl/847312","https://go.dev/issue/81855","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6607"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-97031","description":"Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying multiple references. We now reject these as malformed and curb the memory amplification vector as a result."}]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106408","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106408","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106408","cwe":"CWE-693","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106408","date":"2026-10-09","epss":0.00233,"percentile":0.13068}],"risk":0.133975,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/504227656"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106408","description":"Protection mechanism failure in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"9e813491f50ba632","cpes":["cpe:2.3:a:ffmpeg-libavcodec:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavcodec:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavcodec:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavcodec:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavcodec:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavcodec","purl":"pkg:apk/alpine/ffmpeg-libavcodec@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavcodec.so.62"},{"path":"/usr/lib/libavcodec.so.62.28.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-65704","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-65704","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-65704","cwe":"CWE-191","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-65704","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-65704","date":"2026-10-09","epss":0.00178,"percentile":0.06803}],"risk":0.13394499999999998,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/de771bd52774a52d45b0e2c82e56995a1ef40df7","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23767","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-via-ty-demuxer-and-shorten-decoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-65704","description":"FFmpeg through 8.1.2 contains an out-of-bounds write vulnerability that allows attackers to cause heap corruption by supplying a crafted ffconcat file processed with the -safe 0 flag. The TY demuxer's demux_audio() function decrements packet size without bounds checking, producing a negative size value that is passed to memcpy() in shorten_decode_frame(), where conversion to size_t wraps the value to near SIZE_MAX and triggers reads beyond the source allocation and writes far beyond the Shorten decoder's bitstream buffer."},"relatedVulnerabilities":[]},{"artifact":{"id":"d07d7332fd90e2f5","cpes":["cpe:2.3:a:ffmpeg-libavformat:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavformat:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavformat:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavformat:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavformat:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavformat","purl":"pkg:apk/alpine/ffmpeg-libavformat@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavformat.so.62"},{"path":"/usr/lib/libavformat.so.62.12.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-65704","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-65704","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-65704","cwe":"CWE-191","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-65704","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-65704","date":"2026-10-09","epss":0.00178,"percentile":0.06803}],"risk":0.13394499999999998,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/de771bd52774a52d45b0e2c82e56995a1ef40df7","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23767","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-via-ty-demuxer-and-shorten-decoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-65704","description":"FFmpeg through 8.1.2 contains an out-of-bounds write vulnerability that allows attackers to cause heap corruption by supplying a crafted ffconcat file processed with the -safe 0 flag. The TY demuxer's demux_audio() function decrements packet size without bounds checking, producing a negative size value that is passed to memcpy() in shorten_decode_frame(), where conversion to size_t wraps the value to near SIZE_MAX and triggers reads beyond the source allocation and writes far beyond the Shorten decoder's bitstream buffer."},"relatedVulnerabilities":[]},{"artifact":{"id":"50075ec0b9beb4e7","cpes":["cpe:2.3:a:ffmpeg-libavutil:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libavutil:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libavutil:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libavutil:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libavutil:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libavutil","purl":"pkg:apk/alpine/ffmpeg-libavutil@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libavutil.so.60"},{"path":"/usr/lib/libavutil.so.60.26.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-65704","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-65704","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-65704","cwe":"CWE-191","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-65704","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-65704","date":"2026-10-09","epss":0.00178,"percentile":0.06803}],"risk":0.13394499999999998,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/de771bd52774a52d45b0e2c82e56995a1ef40df7","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23767","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-via-ty-demuxer-and-shorten-decoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-65704","description":"FFmpeg through 8.1.2 contains an out-of-bounds write vulnerability that allows attackers to cause heap corruption by supplying a crafted ffconcat file processed with the -safe 0 flag. The TY demuxer's demux_audio() function decrements packet size without bounds checking, producing a negative size value that is passed to memcpy() in shorten_decode_frame(), where conversion to size_t wraps the value to near SIZE_MAX and triggers reads beyond the source allocation and writes far beyond the Shorten decoder's bitstream buffer."},"relatedVulnerabilities":[]},{"artifact":{"id":"15f575ddc365a154","cpes":["cpe:2.3:a:ffmpeg-libswresample:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg-libswresample:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg_libswresample:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg-libswresample:8.1.2-r1:*:*:*:*:*:*:*","cpe:2.3:a:ffmpeg:ffmpeg_libswresample:8.1.2-r1:*:*:*:*:*:*:*"],"name":"ffmpeg-libswresample","purl":"pkg:apk/alpine/ffmpeg-libswresample@8.1.2-r1?arch=x86_64&distro=alpine-3.24.2&upstream=ffmpeg","type":"apk","version":"8.1.2-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libswresample.so.6"},{"path":"/usr/lib/libswresample.so.6.3.102"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ffmpeg"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-65704","versionConstraint":"<= 8.1.2 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:ffmpeg:ffmpeg:8.1.2:*:*:*:*:*:*:*"],"package":{"name":"ffmpeg","version":"8.1.2-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-65704","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-65704","cwe":"CWE-191","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-65704","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-65704","date":"2026-10-09","epss":0.00178,"percentile":0.06803}],"risk":0.13394499999999998,"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/de771bd52774a52d45b0e2c82e56995a1ef40df7","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23767","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-via-ty-demuxer-and-shorten-decoder"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-65704","description":"FFmpeg through 8.1.2 contains an out-of-bounds write vulnerability that allows attackers to cause heap corruption by supplying a crafted ffconcat file processed with the -safe 0 flag. The TY demuxer's demux_audio() function decrements packet size without bounds checking, producing a negative size value that is passed to memcpy() in shorten_decode_frame(), where conversion to size_t wraps the value to near SIZE_MAX and triggers reads beyond the source allocation and writes far beyond the Shorten decoder's bitstream buffer."},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106310","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106310","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106310","cwe":"CWE-672","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106310","date":"2026-10-09","epss":0.00232,"percentile":0.12895}],"risk":0.1334,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/556250086"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106310","description":"Use of released resource in FontAccess in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106209","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106209","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106209","cwe":"CWE-451","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106209","date":"2026-10-09","epss":0.00255,"percentile":0.15688}],"risk":0.13260000000000002,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/518039724"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106209","description":"UI misrepresentation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof address bar via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95279","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95279","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95279","cwe":"CWE-451","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95279","date":"2026-10-09","epss":0.00255,"percentile":0.15688}],"risk":0.13260000000000002,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/514012689"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95279","description":"UI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95307","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95307","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95307","cwe":"CWE-451","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95307","date":"2026-10-09","epss":0.00255,"percentile":0.15687}],"risk":0.13260000000000002,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/423956129"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95307","description":"UI misrepresentation in ExtensionsMenu in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95321","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95321","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95321","cwe":"CWE-451","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95321","date":"2026-10-09","epss":0.00255,"percentile":0.15687}],"risk":0.13260000000000002,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/545879261"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95321","description":"UI misrepresentation in Payments in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95323","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95323","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95323","cwe":"CWE-451","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95323","date":"2026-10-09","epss":0.00255,"percentile":0.15687}],"risk":0.13260000000000002,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/546438368"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95323","description":"UI misrepresentation in Chromium in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof address bar via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95337","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95337","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95337","cwe":"CWE-451","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95337","date":"2026-10-09","epss":0.00255,"percentile":0.15687}],"risk":0.13260000000000002,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/514019137"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95337","description":"UI misrepresentation in Messages in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95288","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95288","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95288","cwe":"CWE-451","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95288","date":"2026-10-09","epss":0.00255,"percentile":0.15686}],"risk":0.13260000000000002,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/533102653"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95288","description":"UI misrepresentation in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95291","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95291","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95291","cwe":"CWE-451","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95291","date":"2026-10-09","epss":0.00255,"percentile":0.15686}],"risk":0.13260000000000002,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/543471693"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95291","description":"UI misrepresentation in SecurityIndicators in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95294","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95294","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95294","cwe":"CWE-451","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95294","date":"2026-10-09","epss":0.00255,"percentile":0.15686}],"risk":0.13260000000000002,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/513992281"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95294","description":"UI misrepresentation in Browser in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95309","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95309","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95309","cwe":"CWE-451","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95309","date":"2026-10-09","epss":0.00255,"percentile":0.15686}],"risk":0.13260000000000002,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/533074595"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95309","description":"UI misrepresentation in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87507","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87507","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87507","cwe":"CWE-451","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87507","date":"2026-10-09","epss":0.00255,"percentile":0.15652}],"risk":0.13260000000000002,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/514009699"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87507","description":"UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87583","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87583","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87583","cwe":"CWE-451","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87583","date":"2026-10-09","epss":0.00255,"percentile":0.15651}],"risk":0.13260000000000002,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/533116484"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87583","description":"UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87635","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87635","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87635","cwe":"CWE-451","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87635","date":"2026-10-09","epss":0.00255,"percentile":0.15651}],"risk":0.13260000000000002,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/522304737"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87635","description":"UI misrepresentation in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87458","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87458","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87458","cwe":"CWE-451","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87458","date":"2026-10-09","epss":0.00255,"percentile":0.1565}],"risk":0.13260000000000002,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/517072005"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87458","description":"UI misrepresentation in Geometry in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87462","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87462","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87462","cwe":"CWE-451","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87462","date":"2026-10-09","epss":0.00255,"percentile":0.1565}],"risk":0.13260000000000002,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/514041087"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87462","description":"UI misrepresentation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87642","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87642","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87642","cwe":"CWE-908","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87642","date":"2026-10-09","epss":0.00282,"percentile":0.19037}],"risk":0.13113,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/501644790"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87642","description":"Uninitialized resource in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87564","versionConstraint":"< 153.0.8010.36 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87564","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87564","cwe":"CWE-843","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-87564","date":"2026-10-09","epss":0.00282,"percentile":0.19035}],"risk":0.13113,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html","https://issues.chromium.org/issues/552342545"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87564","description":"Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-106242","versionConstraint":"< 155.0.8059.39 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-106242","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-106242","cwe":"CWE-200","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-106242","date":"2026-10-09","epss":0.00228,"percentile":0.12554}],"risk":0.1311,"urls":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/501647772"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-106242","description":"Information leak in Omnibox in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak sensitive information via crafted network traffic. (Chromium security severity: Medium)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-91726","versionConstraint":"< 153.0.8010.47 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-91726","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N","metrics":{"baseScore":4.7,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91726","cwe":"CWE-125","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-91726","date":"2026-10-09","epss":0.0027,"percentile":0.17615}],"risk":0.13095,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0541751186.html","https://issues.chromium.org/issues/556870863"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91726","description":"Out of bounds read in WebGL in Google Chrome on on Android prior to 153.0.8010.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-95328","versionConstraint":"< 154.0.8037.57 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-95328","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95328","cwe":"CWE-441","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-95328","date":"2026-10-09","epss":0.00227,"percentile":0.12316}],"risk":0.13052499999999997,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","https://issues.chromium.org/issues/553148673"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95328","description":"Confused deputy in Mobile in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker leveraging social engineering to obtain sensitive information via a co-installed app. (Chromium security severity: Low)"},"relatedVulnerabilities":[]},{"artifact":{"id":"c382a74fec687026","cpes":["cpe:2.3:a:chromium:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chromium:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chromium:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:chrome:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:152.0.7977.82-r1:*:*:*:*:*:*:*"],"name":"chromium","purl":"pkg:apk/alpine/chromium@152.0.7977.82-r1?arch=x86_64&distro=alpine-3.24.2","type":"apk","version":"152.0.7977.82-r1","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/chromium"},{"path":"/etc/chromium/chromium.conf"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/chromium"},{"path":"/usr/bin/chromium-browser"},{"path":"/usr/lib"},{"path":"/usr/lib/chromium"},{"path":"/usr/lib/chromium/chrome"},{"path":"/usr/lib/chromium/chrome-sandbox"},{"path":"/usr/lib/chromium/chrome_100_percent.pak"},{"path":"/usr/lib/chromium/chrome_200_percent.pak"},{"path":"/usr/lib/chromium/chrome_crashpad_handler"},{"path":"/usr/lib/chromium/chromium"},{"path":"/usr/lib/chromium/chromium-launcher.sh"},{"path":"/usr/lib/chromium/icudtl.dat"},{"path":"/usr/lib/chromium/resources.pak"},{"path":"/usr/lib/chromium/snapshot_blob.bin"},{"path":"/usr/lib/chromium/ui_resources_100_percent.pak"},{"path":"/usr/lib/chromium/ui_test.pak"},{"path":"/usr/lib/chromium/MEIPreload"},{"path":"/usr/lib/chromium/MEIPreload/manifest.json"},{"path":"/usr/lib/chromium/MEIPreload/preloaded_data.pb"},{"path":"/usr/share"},{"path":"/usr/share/applications"},{"path":"/usr/share/applications/chromium.desktop"},{"path":"/usr/share/icons"},{"path":"/usr/share/icons/hicolor"},{"path":"/usr/share/icons/hicolor/128x128"},{"path":"/usr/share/icons/hicolor/128x128/apps"},{"path":"/usr/share/icons/hicolor/128x128/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/16x16"},{"path":"/usr/share/icons/hicolor/16x16/apps"},{"path":"/usr/share/icons/hicolor/16x16/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/24x24"},{"path":"/usr/share/icons/hicolor/24x24/apps"},{"path":"/usr/share/icons/hicolor/24x24/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/256x256"},{"path":"/usr/share/icons/hicolor/256x256/apps"},{"path":"/usr/share/icons/hicolor/256x256/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/32x32"},{"path":"/usr/share/icons/hicolor/32x32/apps"},{"path":"/usr/share/icons/hicolor/32x32/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/48x48"},{"path":"/usr/share/icons/hicolor/48x48/apps"},{"path":"/usr/share/icons/hicolor/48x48/apps/chromium.png"},{"path":"/usr/share/icons/hicolor/64x64"},{"path":"/usr/share/icons/hicolor/64x64/apps"},{"path":"/usr/share/icons/hicolor/64x64/apps/chromium.png"},{"path":"/usr/share/metainfo"},{"path":"/usr/share/metainfo/chromium.appdata.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:4c11d385c9e19d917801a085678f24e9c11e5cde04577ea13494b82c2d4fc933","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"chromium"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-93386","versionConstraint":"< 153.0.8010.52 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:google:chrome:152.0.7977.82:*:*:*:*:*:*:*"],"package":{"name":"chromium","version":"152.0.7977.82-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-93386","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-93386","cwe":"CWE-451","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-93386","date":"2026-10-09","epss":0.0025,"percentile":0.14993}],"risk":0.13,"urls":["https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0194356994.html","https://issues.chromium.org/issues/513996595"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-93386","description":"UI misrepresentation in WebAppInstalls in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)"},"relatedVulnerabilities":[]}],"grade":"F","score":"0.00","as_of":"2026-10-10T20:25:34.142Z","grype_db_version":"2026-10-10T06:30:01.000Z"}