CVE-2026-103621

Опубликовано: 02 окт. 2026

Источник: nvd

CVSS3: 4.3

EPSS Низкий

Описание

Integer overflow in Compositing in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

Ссылки

https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop.html
Release Notes
Vendor Advisory
https://issues.chromium.org/issues/556268833
Permissions Required

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

Версия до 154.0.8037.97 (исключая)

EPSS

Процентиль: 9%

0.00202

Низкий

4.3 Medium

CVSS3

Дефекты

CWE-190

Связанные уязвимости

CVE-2026-103621

CVSS3: 4.3

ubuntu

21 день назад

Integer overflow in Compositing in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

CVE-2026-103621

CVSS3: 8.8

redhat

21 день назад

Integer overflow in Compositing in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

CVE-2026-103621

CVSS3: 4.3

debian

21 день назад

Integer overflow in Compositing in Google Chrome prior to 154.0.8037.9 ...

GHSA-wm39-rhjr-c7cr

CVSS3: 4.3

github

20 дней назад

Integer overflow in Compositing in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

openSUSE-SU-2026:22023-1

suse-cvrf

17 дней назад

Security update for chromium

EPSS

Процентиль: 9%

0.00202

Низкий

4.3 Medium

CVSS3

Дефекты

CWE-190