Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/1062448?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "type": "deb", "namespace": "debian", "name": "chromium", "version": "147.0.7727.55-1~deb13u1", "qualifiers": { "distro": "trixie" }, "subpath": "", "is_vulnerable": false, "next_non_vulnerable_version": "147.0.7727.101-1~deb12u1", "latest_non_vulnerable_version": "147.0.7727.101-1", "affected_by_vulnerabilities": [], "fixing_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350961?format=api", "vulnerability_id": "VCID-1u43-n5v6-auby", "summary": "Race in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5893.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.6", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5893.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5893", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0003", "scoring_system": "epss", "scoring_elements": "0.08509", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.0003", "scoring_system": "epss", "scoring_elements": "0.08353", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.0003", "scoring_system": "epss", "scoring_elements": "0.0837", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00032", "scoring_system": "epss", "scoring_elements": "0.09157", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00032", "scoring_system": "epss", "scoring_elements": "0.09158", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00032", "scoring_system": "epss", "scoring_elements": "0.09125", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00032", "scoring_system": "epss", "scoring_elements": "0.09111", "published_at": "2026-04-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5893" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5893", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5893" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456754", "reference_id": "2456754", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456754" }, { "reference_url": "https://issues.chromium.org/issues/487768771", "reference_id": "487768771", "reference_type": "", "scores": [ { "value": "6.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-13T20:11:45Z/" } ], "url": "https://issues.chromium.org/issues/487768771" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "6.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-13T20:11:45Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5893" ], "risk_score": 4.3, "exploitability": "0.5", "weighted_severity": "8.6", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-1u43-n5v6-auby" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350941?format=api", "vulnerability_id": "VCID-2k46-261h-y3bd", "summary": "Out of bounds read and write in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5873.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.6", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5873.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5873", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00038", "scoring_system": "epss", "scoring_elements": "0.11334", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00038", "scoring_system": "epss", "scoring_elements": "0.11391", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00038", "scoring_system": "epss", "scoring_elements": "0.11397", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00038", "scoring_system": "epss", "scoring_elements": "0.11363", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00102", "scoring_system": "epss", "scoring_elements": "0.27974", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00102", "scoring_system": "epss", "scoring_elements": "0.28039", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00102", "scoring_system": "epss", "scoring_elements": "0.28022", "published_at": "2026-04-18T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5873" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5873", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5873" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456808", "reference_id": "2456808", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456808" }, { "reference_url": "https://issues.chromium.org/issues/496301615", "reference_id": "496301615", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-10T03:55:56Z/" } ], "url": "https://issues.chromium.org/issues/496301615" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-10T03:55:56Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5873" ], "risk_score": 4.3, "exploitability": "0.5", "weighted_severity": "8.6", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-2k46-261h-y3bd" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350981?format=api", "vulnerability_id": "VCID-2yea-nk5s-73a9", "summary": "Out of bounds read in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Low)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5913.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5913.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5913", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.1036", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10393", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10421", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10382", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00086", "scoring_system": "epss", "scoring_elements": "0.24846", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00086", "scoring_system": "epss", "scoring_elements": "0.24875", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00086", "scoring_system": "epss", "scoring_elements": "0.24869", "published_at": "2026-04-18T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5913" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5913", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5913" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456783", "reference_id": "2456783", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456783" }, { "reference_url": "https://issues.chromium.org/issues/487195286", "reference_id": "487195286", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-13T18:15:10Z/" } ], "url": "https://issues.chromium.org/issues/487195286" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-13T18:15:10Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5913" ], "risk_score": 2.5, "exploitability": "0.5", "weighted_severity": "4.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-2yea-nk5s-73a9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350932?format=api", "vulnerability_id": "VCID-3etf-ubtt-43ge", "summary": "Heap buffer overflow in WebAudio in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5864.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5864.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5864", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00029", "scoring_system": "epss", "scoring_elements": "0.0813", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00029", "scoring_system": "epss", "scoring_elements": "0.0828", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00029", "scoring_system": "epss", "scoring_elements": "0.08116", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.0003", "scoring_system": "epss", "scoring_elements": "0.08481", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00054", "scoring_system": "epss", "scoring_elements": "0.1703", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00054", "scoring_system": "epss", "scoring_elements": "0.16984", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00054", "scoring_system": "epss", "scoring_elements": "0.16924", "published_at": "2026-04-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5864" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5864", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5864" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456745", "reference_id": "2456745", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456745" }, { "reference_url": "https://issues.chromium.org/issues/490642831", "reference_id": "490642831", "reference_type": "", "scores": [ { "value": "4.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L" }, { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" }, { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-13T13:42:48Z/" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-10T18:40:37Z/" } ], "url": "https://issues.chromium.org/issues/490642831" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "4.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L" }, { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" }, { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-13T13:42:48Z/" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-10T18:40:37Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5864" ], "risk_score": 3.0, "exploitability": "0.5", "weighted_severity": "5.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-3etf-ubtt-43ge" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350929?format=api", "vulnerability_id": "VCID-4hwd-qaxh-ebac", "summary": "Use after free in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5861.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.6", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5861.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5861", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00038", "scoring_system": "epss", "scoring_elements": "0.11334", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00038", "scoring_system": "epss", "scoring_elements": "0.11391", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00038", "scoring_system": "epss", "scoring_elements": "0.11397", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00038", "scoring_system": "epss", "scoring_elements": "0.11363", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00139", "scoring_system": "epss", "scoring_elements": "0.33978", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00139", "scoring_system": "epss", "scoring_elements": "0.34024", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00139", "scoring_system": "epss", "scoring_elements": "0.34012", "published_at": "2026-04-18T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5861" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5861", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5861" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456739", "reference_id": "2456739", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456739" }, { "reference_url": "https://issues.chromium.org/issues/486927780", "reference_id": "486927780", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-10T03:55:40Z/" } ], "url": "https://issues.chromium.org/issues/486927780" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-10T03:55:40Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5861" ], "risk_score": 4.3, "exploitability": "0.5", "weighted_severity": "8.6", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-4hwd-qaxh-ebac" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350956?format=api", "vulnerability_id": "VCID-5754-qrbg-2yds", "summary": "Uninitialized Use in WebCodecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5888.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5888.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5888", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00031", "scoring_system": "epss", "scoring_elements": "0.08799", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00031", "scoring_system": "epss", "scoring_elements": "0.08645", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00031", "scoring_system": "epss", "scoring_elements": "0.08661", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00032", "scoring_system": "epss", "scoring_elements": "0.09357", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00032", "scoring_system": "epss", "scoring_elements": "0.09366", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00032", "scoring_system": "epss", "scoring_elements": "0.09338", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00032", "scoring_system": "epss", "scoring_elements": "0.09325", "published_at": "2026-04-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5888" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5888", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5888" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456800", "reference_id": "2456800", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456800" }, { "reference_url": "https://issues.chromium.org/issues/486506202", "reference_id": "486506202", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-13T17:59:40Z/" } ], "url": "https://issues.chromium.org/issues/486506202" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-13T17:59:40Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5888" ], "risk_score": 1.9, "exploitability": "0.5", "weighted_severity": "3.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5754-qrbg-2yds" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350969?format=api", "vulnerability_id": "VCID-5uf7-45dg-skfb", "summary": "Insufficient policy enforcement in DevTools in Google Chrome prior to 147.0.7727.55 allowed an attacker who convinced a user to install a malicious extension to bypass enterprise host restrictions for cookie modification via a crafted Chrome Extension. (Chromium security severity: Low)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5901.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.9", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5901.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5901", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00021", "scoring_system": "epss", "scoring_elements": "0.05677", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00021", "scoring_system": "epss", "scoring_elements": "0.05513", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00021", "scoring_system": "epss", "scoring_elements": "0.05503", "published_at": "2026-04-16T12:55:00Z" }, { "value": "8e-05", "scoring_system": "epss", "scoring_elements": "0.00764", "published_at": "2026-04-09T12:55:00Z" }, { "value": "8e-05", "scoring_system": "epss", "scoring_elements": "0.00759", "published_at": "2026-04-11T12:55:00Z" }, { "value": "8e-05", "scoring_system": "epss", "scoring_elements": "0.00754", "published_at": "2026-04-12T12:55:00Z" }, { "value": "8e-05", "scoring_system": "epss", "scoring_elements": "0.00755", "published_at": "2026-04-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5901" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5901", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5901" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456772", "reference_id": "2456772", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456772" }, { "reference_url": "https://issues.chromium.org/issues/479673903", "reference_id": "479673903", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-13T18:04:30Z/" } ], "url": "https://issues.chromium.org/issues/479673903" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-13T18:04:30Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5901" ], "risk_score": 1.9, "exploitability": "0.5", "weighted_severity": "3.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5uf7-45dg-skfb" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350974?format=api", "vulnerability_id": "VCID-67c2-tzxz-6ucq", "summary": "Incorrect security UI in Omnibox in Google Chrome on Android prior to 147.0.7727.55 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Low)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5906.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5906.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5906", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00022", "scoring_system": "epss", "scoring_elements": "0.05968", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00022", "scoring_system": "epss", "scoring_elements": "0.05978", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00022", "scoring_system": "epss", "scoring_elements": "0.05987", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00028", "scoring_system": "epss", "scoring_elements": "0.081", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00028", "scoring_system": "epss", "scoring_elements": "0.07954", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00028", "scoring_system": "epss", "scoring_elements": "0.07941", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10393", "published_at": "2026-04-09T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5906" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5906", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5906" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456784", "reference_id": "2456784", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456784" }, { "reference_url": "https://issues.chromium.org/issues/484082189", "reference_id": "484082189", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-09T15:41:15Z/" } ], "url": "https://issues.chromium.org/issues/484082189" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-09T15:41:15Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5906" ], "risk_score": 1.9, "exploitability": "0.5", "weighted_severity": "3.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-67c2-tzxz-6ucq" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350975?format=api", "vulnerability_id": "VCID-7krq-wfrd-6fbp", "summary": "Insufficient data validation in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory read via a crafted video file. (Chromium security severity: Low)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5907.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5907.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5907", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10393", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00068", "scoring_system": "epss", "scoring_elements": "0.2093", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00068", "scoring_system": "epss", "scoring_elements": "0.20886", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00068", "scoring_system": "epss", "scoring_elements": "0.20835", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00086", "scoring_system": "epss", "scoring_elements": "0.24846", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00086", "scoring_system": "epss", "scoring_elements": "0.24869", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00086", "scoring_system": "epss", "scoring_elements": "0.24875", "published_at": "2026-04-16T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5907" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5907", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5907" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456752", "reference_id": "2456752", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456752" }, { "reference_url": "https://issues.chromium.org/issues/484665123", "reference_id": "484665123", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-09T15:31:54Z/" } ], "url": "https://issues.chromium.org/issues/484665123" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-09T15:31:54Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5907" ], "risk_score": 2.5, "exploitability": "0.5", "weighted_severity": "4.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-7krq-wfrd-6fbp" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350930?format=api", "vulnerability_id": "VCID-9d7w-89vj-m3gy", "summary": "Inappropriate implementation in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5862.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5862.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5862", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00038", "scoring_system": "epss", "scoring_elements": "0.11334", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00038", "scoring_system": "epss", "scoring_elements": "0.11391", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00038", "scoring_system": "epss", "scoring_elements": "0.11397", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00038", "scoring_system": "epss", "scoring_elements": "0.11363", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00102", "scoring_system": "epss", "scoring_elements": "0.27974", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00102", "scoring_system": "epss", "scoring_elements": "0.28039", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00102", "scoring_system": "epss", "scoring_elements": "0.28022", "published_at": "2026-04-18T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5862" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5862", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5862" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456767", "reference_id": "2456767", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456767" }, { "reference_url": "https://issues.chromium.org/issues/470566252", "reference_id": "470566252", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-10T03:55:42Z/" } ], "url": "https://issues.chromium.org/issues/470566252" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-10T03:55:42Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5862" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "7.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-9d7w-89vj-m3gy" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350984?format=api", "vulnerability_id": "VCID-9m6n-5q8f-duhk", "summary": "Inappropriate implementation in Navigation in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5918.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5918.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5918", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00012", "scoring_system": "epss", "scoring_elements": "0.01838", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00012", "scoring_system": "epss", "scoring_elements": "0.01843", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00012", "scoring_system": "epss", "scoring_elements": "0.01858", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00016", "scoring_system": "epss", "scoring_elements": "0.03524", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00016", "scoring_system": "epss", "scoring_elements": "0.03395", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00016", "scoring_system": "epss", "scoring_elements": "0.03407", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10393", "published_at": "2026-04-09T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5918" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5918", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5918" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456804", "reference_id": "2456804", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456804" }, { "reference_url": "https://issues.chromium.org/issues/490139441", "reference_id": "490139441", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-09T14:31:29Z/" } ], "url": "https://issues.chromium.org/issues/490139441" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-09T14:31:29Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5918" ], "risk_score": 2.6, "exploitability": "0.5", "weighted_severity": "5.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-9m6n-5q8f-duhk" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350985?format=api", "vulnerability_id": "VCID-b7tk-q4qp-tfbk", "summary": "Insufficient validation of untrusted input in WebSockets in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. (Chromium security severity: Low)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5919.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5919.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5919", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0002", "scoring_system": "epss", "scoring_elements": "0.05356", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.0002", "scoring_system": "epss", "scoring_elements": "0.05364", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.0002", "scoring_system": "epss", "scoring_elements": "0.05376", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00021", "scoring_system": "epss", "scoring_elements": "0.05608", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00037", "scoring_system": "epss", "scoring_elements": "0.11086", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00037", "scoring_system": "epss", "scoring_elements": "0.11226", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00037", "scoring_system": "epss", "scoring_elements": "0.11095", "published_at": "2026-04-18T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5919" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5919", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5919" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456758", "reference_id": "2456758", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456758" }, { "reference_url": "https://issues.chromium.org/issues/483423893", "reference_id": "483423893", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-09T14:22:34Z/" } ], "url": "https://issues.chromium.org/issues/483423893" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-09T14:22:34Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5919" ], "risk_score": 3.5, "exploitability": "0.5", "weighted_severity": "6.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-b7tk-q4qp-tfbk" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350953?format=api", "vulnerability_id": "VCID-c67h-3ect-6bf3", "summary": "Insufficient validation of untrusted input in WebML in Google Chrome on Windows prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5885.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5885.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5885", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00043", "scoring_system": "epss", "scoring_elements": "0.13091", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00043", "scoring_system": "epss", "scoring_elements": "0.13181", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00043", "scoring_system": "epss", "scoring_elements": "0.13212", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00043", "scoring_system": "epss", "scoring_elements": "0.13142", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00044", "scoring_system": "epss", "scoring_elements": "0.13331", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00044", "scoring_system": "epss", "scoring_elements": "0.13252", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00044", "scoring_system": "epss", "scoring_elements": "0.13251", "published_at": "2026-04-18T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5885" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5885", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5885" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456750", "reference_id": "2456750", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456750" }, { "reference_url": "https://issues.chromium.org/issues/485203823", "reference_id": "485203823", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-13T17:57:57Z/" } ], "url": "https://issues.chromium.org/issues/485203823" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-13T17:57:57Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5885" ], "risk_score": 3.0, "exploitability": "0.5", "weighted_severity": "5.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-c67h-3ect-6bf3" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350931?format=api", "vulnerability_id": "VCID-c6en-brtw-37h9", "summary": "Inappropriate implementation in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5863.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.6", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5863.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5863", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00038", "scoring_system": "epss", "scoring_elements": "0.11334", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00038", "scoring_system": "epss", "scoring_elements": "0.11391", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00038", "scoring_system": "epss", "scoring_elements": "0.11397", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00038", "scoring_system": "epss", "scoring_elements": "0.11363", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00102", "scoring_system": "epss", "scoring_elements": "0.27974", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00102", "scoring_system": "epss", "scoring_elements": "0.28039", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00102", "scoring_system": "epss", "scoring_elements": "0.28022", "published_at": "2026-04-18T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5863" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5863", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5863" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456797", "reference_id": "2456797", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456797" }, { "reference_url": "https://issues.chromium.org/issues/484527367", "reference_id": "484527367", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-10T03:55:43Z/" } ], "url": "https://issues.chromium.org/issues/484527367" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-10T03:55:43Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5863" ], "risk_score": 4.3, "exploitability": "0.5", "weighted_severity": "8.6", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-c6en-brtw-37h9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350936?format=api", "vulnerability_id": "VCID-cfss-kmk3-1uht", "summary": "Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5868.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5868.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5868", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10193", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10218", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10254", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10213", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00091", "scoring_system": "epss", "scoring_elements": "0.25634", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00091", "scoring_system": "epss", "scoring_elements": "0.25675", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00091", "scoring_system": "epss", "scoring_elements": "0.25658", "published_at": "2026-04-18T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5868" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5868", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5868" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456737", "reference_id": "2456737", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456737" }, { "reference_url": "https://issues.chromium.org/issues/493256564", "reference_id": "493256564", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-10T03:55:50Z/" } ], "url": "https://issues.chromium.org/issues/493256564" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-10T03:55:50Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5868" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "7.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-cfss-kmk3-1uht" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350946?format=api", "vulnerability_id": "VCID-dah7-rev6-jffr", "summary": "Incorrect security UI in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5878.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5878.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5878", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00028", "scoring_system": "epss", "scoring_elements": "0.081", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00028", "scoring_system": "epss", "scoring_elements": "0.07941", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00028", "scoring_system": "epss", "scoring_elements": "0.07954", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10393", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10421", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10382", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.1036", "published_at": "2026-04-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5878" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5878", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5878" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456761", "reference_id": "2456761", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456761" }, { "reference_url": "https://issues.chromium.org/issues/365089001", "reference_id": "365089001", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-13T17:53:53Z/" } ], "url": "https://issues.chromium.org/issues/365089001" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-13T17:53:53Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5878" ], "risk_score": 2.5, "exploitability": "0.5", "weighted_severity": "4.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-dah7-rev6-jffr" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350957?format=api", "vulnerability_id": "VCID-dcdp-y63b-kkde", "summary": "Cryptographic Flaw in PDFium in Google Chrome prior to 147.0.7727.55 allowed an attacker to read potentially sensitive information from encrypted PDFs via a brute-force attack. (Chromium security severity: Medium)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5889.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.2", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5889.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5889", "reference_id": "", "reference_type": "", "scores": [ { "value": "6e-05", "scoring_system": "epss", "scoring_elements": "0.00456", "published_at": "2026-04-21T12:55:00Z" }, { "value": "6e-05", "scoring_system": "epss", "scoring_elements": "0.00426", "published_at": "2026-04-18T12:55:00Z" }, { "value": "6e-05", "scoring_system": "epss", "scoring_elements": "0.00421", "published_at": "2026-04-16T12:55:00Z" }, { "value": "8e-05", "scoring_system": "epss", "scoring_elements": "0.00764", "published_at": "2026-04-09T12:55:00Z" }, { "value": "8e-05", "scoring_system": "epss", "scoring_elements": "0.00759", "published_at": "2026-04-11T12:55:00Z" }, { "value": "8e-05", "scoring_system": "epss", "scoring_elements": "0.00754", "published_at": "2026-04-12T12:55:00Z" }, { "value": "8e-05", "scoring_system": "epss", "scoring_elements": "0.00755", "published_at": "2026-04-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5889" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5889", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5889" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456774", "reference_id": "2456774", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456774" }, { "reference_url": "https://issues.chromium.org/issues/486906037", "reference_id": "486906037", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-13T20:17:44Z/" } ], "url": "https://issues.chromium.org/issues/486906037" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-13T20:17:44Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5889" ], "risk_score": 2.8, "exploitability": "0.5", "weighted_severity": "5.6", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-dcdp-y63b-kkde" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350937?format=api", "vulnerability_id": "VCID-dm39-2c62-7bb6", "summary": "Heap buffer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5869.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5869.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5869", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00029", "scoring_system": "epss", "scoring_elements": "0.0813", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00029", "scoring_system": "epss", "scoring_elements": "0.0828", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00029", "scoring_system": "epss", "scoring_elements": "0.08116", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.0003", "scoring_system": "epss", "scoring_elements": "0.08481", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00054", "scoring_system": "epss", "scoring_elements": "0.1703", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00054", "scoring_system": "epss", "scoring_elements": "0.16984", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00054", "scoring_system": "epss", "scoring_elements": "0.16924", "published_at": "2026-04-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5869" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5869", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5869" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456777", "reference_id": "2456777", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456777" }, { "reference_url": "https://issues.chromium.org/issues/493708165", "reference_id": "493708165", "reference_type": "", "scores": [ { "value": "3.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" }, { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" }, { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-13T13:44:57Z/" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-10T18:39:36Z/" } ], "url": "https://issues.chromium.org/issues/493708165" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "3.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" }, { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" }, { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-13T13:44:57Z/" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-10T18:39:36Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5869" ], "risk_score": 3.0, "exploitability": "0.5", "weighted_severity": "5.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-dm39-2c62-7bb6" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350947?format=api", "vulnerability_id": "VCID-dvc2-qesm-jkd5", "summary": "Insufficient validation of untrusted input in ANGLE in Google Chrome on Mac prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5879.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5879.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5879", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0005", "scoring_system": "epss", "scoring_elements": "0.15502", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.0005", "scoring_system": "epss", "scoring_elements": "0.15637", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.0005", "scoring_system": "epss", "scoring_elements": "0.15604", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.0005", "scoring_system": "epss", "scoring_elements": "0.15567", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00148", "scoring_system": "epss", "scoring_elements": "0.35245", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00148", "scoring_system": "epss", "scoring_elements": "0.35308", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00148", "scoring_system": "epss", "scoring_elements": "0.35294", "published_at": "2026-04-18T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5879" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5879", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5879" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456779", "reference_id": "2456779", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456779" }, { "reference_url": "https://issues.chromium.org/issues/40073848", "reference_id": "40073848", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-10T03:55:57Z/" } ], "url": "https://issues.chromium.org/issues/40073848" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-10T03:55:57Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5879" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "7.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-dvc2-qesm-jkd5" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350979?format=api", "vulnerability_id": "VCID-dwqg-vuy2-2uhe", "summary": "Policy bypass in ServiceWorkers in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Low)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5911.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5911.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5911", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00016", "scoring_system": "epss", "scoring_elements": "0.03459", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00026", "scoring_system": "epss", "scoring_elements": "0.07379", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00026", "scoring_system": "epss", "scoring_elements": "0.07366", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00026", "scoring_system": "epss", "scoring_elements": "0.07353", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00034", "scoring_system": "epss", "scoring_elements": "0.09801", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00034", "scoring_system": "epss", "scoring_elements": "0.09657", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00034", "scoring_system": "epss", "scoring_elements": "0.09688", "published_at": "2026-04-16T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5911" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5911", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5911" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456810", "reference_id": "2456810", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456810" }, { "reference_url": "https://issues.chromium.org/issues/485785246", "reference_id": "485785246", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-09T15:07:13Z/" } ], "url": "https://issues.chromium.org/issues/485785246" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-09T15:07:13Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5911" ], "risk_score": 2.8, "exploitability": "0.5", "weighted_severity": "5.5", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-dwqg-vuy2-2uhe" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350934?format=api", "vulnerability_id": "VCID-eppu-2256-nud8", "summary": "Use after free in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5866.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.6", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5866.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5866", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00038", "scoring_system": "epss", "scoring_elements": "0.11391", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.0008", "scoring_system": "epss", "scoring_elements": "0.23656", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.0008", "scoring_system": "epss", "scoring_elements": "0.23614", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.0008", "scoring_system": "epss", "scoring_elements": "0.23557", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00139", "scoring_system": "epss", "scoring_elements": "0.33978", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00139", "scoring_system": "epss", "scoring_elements": "0.34012", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00139", "scoring_system": "epss", "scoring_elements": "0.34024", "published_at": "2026-04-16T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5866" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5866", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5866" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456787", "reference_id": "2456787", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456787" }, { "reference_url": "https://issues.chromium.org/issues/492218537", "reference_id": "492218537", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-09T15:36:24Z/" } ], "url": "https://issues.chromium.org/issues/492218537" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-09T15:36:24Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5866" ], "risk_score": 4.3, "exploitability": "0.5", "weighted_severity": "8.6", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-eppu-2256-nud8" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350952?format=api", "vulnerability_id": "VCID-ezsm-r6h7-b3hu", "summary": "Insufficient validation of untrusted input in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5884.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.0", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5884.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5884", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0005", "scoring_system": "epss", "scoring_elements": "0.15502", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.0005", "scoring_system": "epss", "scoring_elements": "0.15637", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.0005", "scoring_system": "epss", "scoring_elements": "0.15604", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.0005", "scoring_system": "epss", "scoring_elements": "0.15567", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00138", "scoring_system": "epss", "scoring_elements": "0.33541", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00138", "scoring_system": "epss", "scoring_elements": "0.33598", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00138", "scoring_system": "epss", "scoring_elements": "0.33574", "published_at": "2026-04-18T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5884" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5884", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5884" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456788", "reference_id": "2456788", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456788" }, { "reference_url": "https://issues.chromium.org/issues/484547633", "reference_id": "484547633", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-10T03:56:00Z/" } ], "url": "https://issues.chromium.org/issues/484547633" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-10T03:56:00Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5884" ], "risk_score": 3.6, "exploitability": "0.5", "weighted_severity": "7.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ezsm-r6h7-b3hu" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350949?format=api", "vulnerability_id": "VCID-fe9g-f832-93ge", "summary": "Policy bypass in LocalNetworkAccess in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5881.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5881.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5881", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00016", "scoring_system": "epss", "scoring_elements": "0.03367", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00016", "scoring_system": "epss", "scoring_elements": "0.03459", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00016", "scoring_system": "epss", "scoring_elements": "0.03418", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00016", "scoring_system": "epss", "scoring_elements": "0.0339", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00025", "scoring_system": "epss", "scoring_elements": "0.0705", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00025", "scoring_system": "epss", "scoring_elements": "0.06931", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00025", "scoring_system": "epss", "scoring_elements": "0.06915", "published_at": "2026-04-18T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5881" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5881", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5881" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456757", "reference_id": "2456757", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456757" }, { "reference_url": "https://issues.chromium.org/issues/454162508", "reference_id": "454162508", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-13T17:56:18Z/" } ], "url": "https://issues.chromium.org/issues/454162508" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-13T17:56:18Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5881" ], "risk_score": 2.5, "exploitability": "0.5", "weighted_severity": "4.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-fe9g-f832-93ge" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350933?format=api", "vulnerability_id": "VCID-gte6-2nmf-17ed", "summary": "Type Confusion in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5865.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.6", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5865.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5865", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00038", "scoring_system": "epss", "scoring_elements": "0.11334", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00038", "scoring_system": "epss", "scoring_elements": "0.11391", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00038", "scoring_system": "epss", "scoring_elements": "0.11397", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00038", "scoring_system": "epss", "scoring_elements": "0.11363", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00104", "scoring_system": "epss", "scoring_elements": "0.28254", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00104", "scoring_system": "epss", "scoring_elements": "0.28321", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00104", "scoring_system": "epss", "scoring_elements": "0.283", "published_at": "2026-04-18T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5865" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5865", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5865" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456782", "reference_id": "2456782", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456782" }, { "reference_url": "https://issues.chromium.org/issues/491884710", "reference_id": "491884710", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-10T03:55:44Z/" } ], "url": "https://issues.chromium.org/issues/491884710" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-10T03:55:44Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5865" ], "risk_score": 4.3, "exploitability": "0.5", "weighted_severity": "8.6", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-gte6-2nmf-17ed" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350944?format=api", "vulnerability_id": "VCID-gz5r-x3cv-9yh6", "summary": "Side-channel information leakage in Navigation in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5876.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5876.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5876", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00028", "scoring_system": "epss", "scoring_elements": "0.0782", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00028", "scoring_system": "epss", "scoring_elements": "0.07834", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00028", "scoring_system": "epss", "scoring_elements": "0.07848", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10391", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10393", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10288", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.1026", "published_at": "2026-04-18T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5876" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5876", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5876" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456764", "reference_id": "2456764", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456764" }, { "reference_url": "https://issues.chromium.org/issues/41485206", "reference_id": "41485206", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-11T03:02:42Z/" } ], "url": "https://issues.chromium.org/issues/41485206" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-11T03:02:42Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5876" ], "risk_score": 3.4, "exploitability": "0.5", "weighted_severity": "6.7", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-gz5r-x3cv-9yh6" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350940?format=api", "vulnerability_id": "VCID-h4bc-hpby-53a2", "summary": "Use after free in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5872.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.6", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5872.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5872", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00038", "scoring_system": "epss", "scoring_elements": "0.11334", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00038", "scoring_system": "epss", "scoring_elements": "0.11391", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00038", "scoring_system": "epss", "scoring_elements": "0.11397", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00038", "scoring_system": "epss", "scoring_elements": "0.11363", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00139", "scoring_system": "epss", "scoring_elements": "0.33978", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00139", "scoring_system": "epss", "scoring_elements": "0.34024", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00139", "scoring_system": "epss", "scoring_elements": "0.34012", "published_at": "2026-04-18T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5872" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5872", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5872" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456794", "reference_id": "2456794", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456794" }, { "reference_url": "https://issues.chromium.org/issues/496281816", "reference_id": "496281816", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-10T03:55:54Z/" } ], "url": "https://issues.chromium.org/issues/496281816" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-10T03:55:54Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5872" ], "risk_score": 4.3, "exploitability": "0.5", "weighted_severity": "8.6", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-h4bc-hpby-53a2" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350928?format=api", "vulnerability_id": "VCID-j6ca-hcw4-bke7", "summary": "Use after free in WebRTC in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5860.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.6", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5860.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5860", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00033", "scoring_system": "epss", "scoring_elements": "0.09735", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00033", "scoring_system": "epss", "scoring_elements": "0.09771", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00033", "scoring_system": "epss", "scoring_elements": "0.09784", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00033", "scoring_system": "epss", "scoring_elements": "0.09751", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00123", "scoring_system": "epss", "scoring_elements": "0.3139", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00123", "scoring_system": "epss", "scoring_elements": "0.3144", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00123", "scoring_system": "epss", "scoring_elements": "0.31419", "published_at": "2026-04-18T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5860" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5860", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5860" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456759", "reference_id": "2456759", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456759" }, { "reference_url": "https://issues.chromium.org/issues/486495143", "reference_id": "486495143", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-10T03:55:39Z/" } ], "url": "https://issues.chromium.org/issues/486495143" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-10T03:55:39Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5860" ], "risk_score": 4.3, "exploitability": "0.5", "weighted_severity": "8.6", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-j6ca-hcw4-bke7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350964?format=api", "vulnerability_id": "VCID-jcqn-xvsp-eyb1", "summary": "Policy bypass in Audio in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass sandbox download restrictions via a crafted HTML page. (Chromium security severity: Low)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5896.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5896.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5896", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00016", "scoring_system": "epss", "scoring_elements": "0.03459", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00016", "scoring_system": "epss", "scoring_elements": "0.03418", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00016", "scoring_system": "epss", "scoring_elements": "0.0339", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00016", "scoring_system": "epss", "scoring_elements": "0.03367", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.0003", "scoring_system": "epss", "scoring_elements": "0.08573", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.0003", "scoring_system": "epss", "scoring_elements": "0.08428", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.0003", "scoring_system": "epss", "scoring_elements": "0.08412", "published_at": "2026-04-18T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5896" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5896", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5896" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456756", "reference_id": "2456756", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456756" }, { "reference_url": "https://issues.chromium.org/issues/40064543", "reference_id": "40064543", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-13T20:09:26Z/" } ], "url": "https://issues.chromium.org/issues/40064543" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-13T20:09:26Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5896" ], "risk_score": 2.8, "exploitability": "0.5", "weighted_severity": "5.5", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-jcqn-xvsp-eyb1" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350965?format=api", "vulnerability_id": "VCID-jg3y-nbqx-2qhk", "summary": "Incorrect security UI in Downloads in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5897.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5897.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5897", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00026", "scoring_system": "epss", "scoring_elements": "0.0739", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00026", "scoring_system": "epss", "scoring_elements": "0.07265", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00026", "scoring_system": "epss", "scoring_elements": "0.0727", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10393", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10421", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10382", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.1036", "published_at": "2026-04-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5897" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5897", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5897" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456748", "reference_id": "2456748", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456748" }, { "reference_url": "https://issues.chromium.org/issues/419921726", "reference_id": "419921726", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-13T18:00:28Z/" } ], "url": "https://issues.chromium.org/issues/419921726" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-13T18:00:28Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5897" ], "risk_score": 1.9, "exploitability": "0.5", "weighted_severity": "3.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-jg3y-nbqx-2qhk" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350983?format=api", "vulnerability_id": "VCID-jpyw-dj8s-x3em", "summary": "Insufficient validation of untrusted input in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Low)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5915.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5915.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5915", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00043", "scoring_system": "epss", "scoring_elements": "0.13212", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00053", "scoring_system": "epss", "scoring_elements": "0.16712", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00053", "scoring_system": "epss", "scoring_elements": "0.16669", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00053", "scoring_system": "epss", "scoring_elements": "0.16611", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.001", "scoring_system": "epss", "scoring_elements": "0.27634", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.001", "scoring_system": "epss", "scoring_elements": "0.27673", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.001", "scoring_system": "epss", "scoring_elements": "0.27699", "published_at": "2026-04-16T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5915" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5915", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5915" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456795", "reference_id": "2456795", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456795" }, { "reference_url": "https://issues.chromium.org/issues/494341335", "reference_id": "494341335", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-09T14:34:34Z/" } ], "url": "https://issues.chromium.org/issues/494341335" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-09T14:34:34Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5915" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "7.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-jpyw-dj8s-x3em" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350962?format=api", "vulnerability_id": "VCID-kntf-5ubj-1be5", "summary": "Inappropriate implementation in PDF in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5894.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5894.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5894", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00016", "scoring_system": "epss", "scoring_elements": "0.03367", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00016", "scoring_system": "epss", "scoring_elements": "0.03459", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00016", "scoring_system": "epss", "scoring_elements": "0.03418", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00016", "scoring_system": "epss", "scoring_elements": "0.0339", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00021", "scoring_system": "epss", "scoring_elements": "0.05719", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00021", "scoring_system": "epss", "scoring_elements": "0.05549", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00021", "scoring_system": "epss", "scoring_elements": "0.05562", "published_at": "2026-04-18T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5894" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5894", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5894" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456807", "reference_id": "2456807", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456807" }, { "reference_url": "https://issues.chromium.org/issues/481882038", "reference_id": "481882038", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-14T13:52:34Z/" } ], "url": "https://issues.chromium.org/issues/481882038" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-14T13:52:34Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5894" ], "risk_score": 2.5, "exploitability": "0.5", "weighted_severity": "4.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-kntf-5ubj-1be5" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350971?format=api", "vulnerability_id": "VCID-kqjd-8w3j-wqcm", "summary": "Policy bypass in IFrameSandbox in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5903.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5903.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5903", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00016", "scoring_system": "epss", "scoring_elements": "0.03367", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00016", "scoring_system": "epss", "scoring_elements": "0.03459", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00016", "scoring_system": "epss", "scoring_elements": "0.03418", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00016", "scoring_system": "epss", "scoring_elements": "0.0339", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00031", "scoring_system": "epss", "scoring_elements": "0.09021", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00031", "scoring_system": "epss", "scoring_elements": "0.08892", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00031", "scoring_system": "epss", "scoring_elements": "0.08875", "published_at": "2026-04-18T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5903" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5903", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5903" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456749", "reference_id": "2456749", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456749" }, { "reference_url": "https://issues.chromium.org/issues/483771899", "reference_id": "483771899", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-13T18:13:40Z/" } ], "url": "https://issues.chromium.org/issues/483771899" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-13T18:13:40Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5903" ], "risk_score": 2.8, "exploitability": "0.5", "weighted_severity": "5.5", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-kqjd-8w3j-wqcm" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350972?format=api", "vulnerability_id": "VCID-m84v-xahm-rubz", "summary": "Use after free in V8 in Google Chrome prior to 147.0.7727.55 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: Low)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5904.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.2", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5904.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5904", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00029", "scoring_system": "epss", "scoring_elements": "0.08373", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00029", "scoring_system": "epss", "scoring_elements": "0.08211", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00029", "scoring_system": "epss", "scoring_elements": "0.08224", "published_at": "2026-04-16T12:55:00Z" }, { "value": "8e-05", "scoring_system": "epss", "scoring_elements": "0.00764", "published_at": "2026-04-09T12:55:00Z" }, { "value": "8e-05", "scoring_system": "epss", "scoring_elements": "0.00759", "published_at": "2026-04-11T12:55:00Z" }, { "value": "8e-05", "scoring_system": "epss", "scoring_elements": "0.00754", "published_at": "2026-04-12T12:55:00Z" }, { "value": "8e-05", "scoring_system": "epss", "scoring_elements": "0.00755", "published_at": "2026-04-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5904" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5904", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5904" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456796", "reference_id": "2456796", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456796" }, { "reference_url": "https://issues.chromium.org/issues/483851888", "reference_id": "483851888", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-13T18:14:24Z/" } ], "url": "https://issues.chromium.org/issues/483851888" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-13T18:14:24Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5904" ], "risk_score": 3.7, "exploitability": "0.5", "weighted_severity": "7.4", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-m84v-xahm-rubz" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350960?format=api", "vulnerability_id": "VCID-n42w-7gws-n7dz", "summary": "Insufficient policy enforcement in PWAs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to install a PWA without user consent via a crafted HTML page. (Chromium security severity: Medium)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5892.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5892.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5892", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00028", "scoring_system": "epss", "scoring_elements": "0.07802", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00028", "scoring_system": "epss", "scoring_elements": "0.07941", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00028", "scoring_system": "epss", "scoring_elements": "0.07786", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10393", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10421", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10382", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.1036", "published_at": "2026-04-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5892" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5892", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5892" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456791", "reference_id": "2456791", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456791" }, { "reference_url": "https://issues.chromium.org/issues/487568011", "reference_id": "487568011", "reference_type": "", "scores": [ { "value": "6.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-14T13:47:54Z/" } ], "url": "https://issues.chromium.org/issues/487568011" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "6.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-14T13:47:54Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5892" ], "risk_score": 3.5, "exploitability": "0.5", "weighted_severity": "6.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-n42w-7gws-n7dz" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350945?format=api", "vulnerability_id": "VCID-nc2x-jyqw-8qa8", "summary": "Use after free in Navigation in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5877.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.6", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5877.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5877", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00038", "scoring_system": "epss", "scoring_elements": "0.11334", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00038", "scoring_system": "epss", "scoring_elements": "0.11391", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00038", "scoring_system": "epss", "scoring_elements": "0.11397", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00038", "scoring_system": "epss", "scoring_elements": "0.11363", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00139", "scoring_system": "epss", "scoring_elements": "0.33978", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00139", "scoring_system": "epss", "scoring_elements": "0.34024", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00139", "scoring_system": "epss", "scoring_elements": "0.34012", "published_at": "2026-04-18T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5877" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5877", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5877" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456744", "reference_id": "2456744", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456744" }, { "reference_url": "https://issues.chromium.org/issues/333024273", "reference_id": "333024273", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-13T17:53:22Z/" } ], "url": "https://issues.chromium.org/issues/333024273" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-13T17:53:22Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5877" ], "risk_score": 4.3, "exploitability": "0.5", "weighted_severity": "8.6", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-nc2x-jyqw-8qa8" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350967?format=api", "vulnerability_id": "VCID-neem-fet6-pfdg", "summary": "Insufficient policy enforcement in History Navigation in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: Low)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5899.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.0", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5899.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5899", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00015", "scoring_system": "epss", "scoring_elements": "0.02949", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00015", "scoring_system": "epss", "scoring_elements": "0.02832", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00015", "scoring_system": "epss", "scoring_elements": "0.02823", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00055", "scoring_system": "epss", "scoring_elements": "0.17329", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00055", "scoring_system": "epss", "scoring_elements": "0.17342", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00055", "scoring_system": "epss", "scoring_elements": "0.17292", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00055", "scoring_system": "epss", "scoring_elements": "0.17234", "published_at": "2026-04-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5899" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5899", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5899" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456773", "reference_id": "2456773", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456773" }, { "reference_url": "https://issues.chromium.org/issues/474817168", "reference_id": "474817168", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-13T18:02:18Z/" } ], "url": "https://issues.chromium.org/issues/474817168" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-13T18:02:18Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5899" ], "risk_score": 3.6, "exploitability": "0.5", "weighted_severity": "7.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-neem-fet6-pfdg" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350973?format=api", "vulnerability_id": "VCID-nmme-f7b2-qbcu", "summary": "Incorrect security UI in Permissions in Google Chrome on Windows prior to 147.0.7727.55 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Low)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5905.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5905.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5905", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00017", "scoring_system": "epss", "scoring_elements": "0.03985", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00017", "scoring_system": "epss", "scoring_elements": "0.04013", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00017", "scoring_system": "epss", "scoring_elements": "0.04027", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00021", "scoring_system": "epss", "scoring_elements": "0.05908", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00021", "scoring_system": "epss", "scoring_elements": "0.05756", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00021", "scoring_system": "epss", "scoring_elements": "0.05764", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00027", "scoring_system": "epss", "scoring_elements": "0.07489", "published_at": "2026-04-09T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5905" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5905", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5905" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456780", "reference_id": "2456780", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456780" }, { "reference_url": "https://issues.chromium.org/issues/483899628", "reference_id": "483899628", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-09T15:54:00Z/" } ], "url": "https://issues.chromium.org/issues/483899628" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-09T15:54:00Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5905" ], "risk_score": 1.9, "exploitability": "0.5", "weighted_severity": "3.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-nmme-f7b2-qbcu" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350982?format=api", "vulnerability_id": "VCID-pxwn-s2wc-y3fu", "summary": "Type Confusion in CSS in Google Chrome prior to 147.0.7727.55 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: Low)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5914.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5914.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5914", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00017", "scoring_system": "epss", "scoring_elements": "0.04203", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00017", "scoring_system": "epss", "scoring_elements": "0.04227", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00017", "scoring_system": "epss", "scoring_elements": "0.04242", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00023", "scoring_system": "epss", "scoring_elements": "0.06359", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00023", "scoring_system": "epss", "scoring_elements": "0.06196", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00023", "scoring_system": "epss", "scoring_elements": "0.06208", "published_at": "2026-04-18T12:55:00Z" }, { "value": "8e-05", "scoring_system": "epss", "scoring_elements": "0.00764", "published_at": "2026-04-09T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5914" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5914", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5914" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456736", "reference_id": "2456736", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456736" }, { "reference_url": "https://issues.chromium.org/issues/490023239", "reference_id": "490023239", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-09T14:51:33Z/" } ], "url": "https://issues.chromium.org/issues/490023239" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-09T14:51:33Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5914" ], "risk_score": 2.6, "exploitability": "0.5", "weighted_severity": "5.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-pxwn-s2wc-y3fu" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350938?format=api", "vulnerability_id": "VCID-q6cv-xwf7-aub3", "summary": "Integer overflow in Skia in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5870.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.6", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5870.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5870", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00038", "scoring_system": "epss", "scoring_elements": "0.11334", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00038", "scoring_system": "epss", "scoring_elements": "0.11391", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00038", "scoring_system": "epss", "scoring_elements": "0.11397", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00038", "scoring_system": "epss", "scoring_elements": "0.11363", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00102", "scoring_system": "epss", "scoring_elements": "0.27974", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00102", "scoring_system": "epss", "scoring_elements": "0.28039", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00102", "scoring_system": "epss", "scoring_elements": "0.28022", "published_at": "2026-04-18T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5870" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5870", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5870" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456802", "reference_id": "2456802", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456802" }, { "reference_url": "https://issues.chromium.org/issues/495534710", "reference_id": "495534710", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-10T03:55:51Z/" } ], "url": "https://issues.chromium.org/issues/495534710" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-10T03:55:51Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5870" ], "risk_score": 4.3, "exploitability": "0.5", "weighted_severity": "8.6", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-q6cv-xwf7-aub3" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350948?format=api", "vulnerability_id": "VCID-q8kf-7mg7-u3bp", "summary": "Insufficient policy enforcement in browser UI in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5880.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.6", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5880.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5880", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00026", "scoring_system": "epss", "scoring_elements": "0.07311", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00026", "scoring_system": "epss", "scoring_elements": "0.07185", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00026", "scoring_system": "epss", "scoring_elements": "0.0719", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00032", "scoring_system": "epss", "scoring_elements": "0.09357", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00032", "scoring_system": "epss", "scoring_elements": "0.09366", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00032", "scoring_system": "epss", "scoring_elements": "0.09338", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00032", "scoring_system": "epss", "scoring_elements": "0.09325", "published_at": "2026-04-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5880" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5880", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5880" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456803", "reference_id": "2456803", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456803" }, { "reference_url": "https://issues.chromium.org/issues/424995036", "reference_id": "424995036", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-13T17:55:23Z/" } ], "url": "https://issues.chromium.org/issues/424995036" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-13T17:55:23Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5880" ], "risk_score": 2.5, "exploitability": "0.5", "weighted_severity": "5.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-q8kf-7mg7-u3bp" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350978?format=api", "vulnerability_id": "VCID-qgys-h6hm-z3es", "summary": "Integer overflow in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially exploit heap corruption via a crafted video file. (Chromium security severity: Low)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5910.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5910.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5910", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10393", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00068", "scoring_system": "epss", "scoring_elements": "0.2093", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00068", "scoring_system": "epss", "scoring_elements": "0.20886", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00068", "scoring_system": "epss", "scoring_elements": "0.20835", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00086", "scoring_system": "epss", "scoring_elements": "0.24846", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00086", "scoring_system": "epss", "scoring_elements": "0.24869", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00086", "scoring_system": "epss", "scoring_elements": "0.24875", "published_at": "2026-04-16T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5910" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5910", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5910" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456785", "reference_id": "2456785", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456785" }, { "reference_url": "https://issues.chromium.org/issues/485212874", "reference_id": "485212874", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-09T15:11:08Z/" } ], "url": "https://issues.chromium.org/issues/485212874" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-09T15:11:08Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5910" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "7.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-qgys-h6hm-z3es" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350970?format=api", "vulnerability_id": "VCID-r1c5-16y9-bugq", "summary": "Race in Media in Google Chrome on Android prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to corrupt media stream metadata via a crafted HTML page. (Chromium security severity: Low)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5902.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5902.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5902", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00032", "scoring_system": "epss", "scoring_elements": "0.09157", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00032", "scoring_system": "epss", "scoring_elements": "0.09158", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00032", "scoring_system": "epss", "scoring_elements": "0.09125", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00032", "scoring_system": "epss", "scoring_elements": "0.09111", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00096", "scoring_system": "epss", "scoring_elements": "0.2658", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00096", "scoring_system": "epss", "scoring_elements": "0.26647", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00096", "scoring_system": "epss", "scoring_elements": "0.26618", "published_at": "2026-04-18T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5902" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5902", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5902" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456746", "reference_id": "2456746", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456746" }, { "reference_url": "https://issues.chromium.org/issues/483109205", "reference_id": "483109205", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-13T18:12:38Z/" } ], "url": "https://issues.chromium.org/issues/483109205" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-13T18:12:38Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5902" ], "risk_score": 3.0, "exploitability": "0.5", "weighted_severity": "5.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-r1c5-16y9-bugq" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350966?format=api", "vulnerability_id": "VCID-rzdc-3uut-byhc", "summary": "Incorrect security UI in Omnibox in Google Chrome on iOS prior to 147.0.7727.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5898.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5898.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5898", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00026", "scoring_system": "epss", "scoring_elements": "0.0739", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00026", "scoring_system": "epss", "scoring_elements": "0.07265", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00026", "scoring_system": "epss", "scoring_elements": "0.0727", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10393", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10421", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10382", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.1036", "published_at": "2026-04-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5898" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5898", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5898" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457217", "reference_id": "2457217", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457217" }, { "reference_url": "https://issues.chromium.org/issues/470295118", "reference_id": "470295118", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-13T18:01:05Z/" } ], "url": "https://issues.chromium.org/issues/470295118" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-13T18:01:05Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5898" ], "risk_score": 1.9, "exploitability": "0.5", "weighted_severity": "3.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-rzdc-3uut-byhc" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350926?format=api", "vulnerability_id": "VCID-sxav-2n8n-wkb9", "summary": "Heap buffer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5858.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5858.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5858", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00031", "scoring_system": "epss", "scoring_elements": "0.08741", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00031", "scoring_system": "epss", "scoring_elements": "0.08776", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00031", "scoring_system": "epss", "scoring_elements": "0.08778", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00031", "scoring_system": "epss", "scoring_elements": "0.08755", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00081", "scoring_system": "epss", "scoring_elements": "0.23759", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00081", "scoring_system": "epss", "scoring_elements": "0.23792", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00081", "scoring_system": "epss", "scoring_elements": "0.2378", "published_at": "2026-04-18T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5858" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5858", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5858" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456793", "reference_id": "2456793", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456793" }, { "reference_url": "https://issues.chromium.org/issues/493319454", "reference_id": "493319454", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-10T03:55:36Z/" } ], "url": "https://issues.chromium.org/issues/493319454" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-10T03:55:36Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5858" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "7.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-sxav-2n8n-wkb9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350980?format=api", "vulnerability_id": "VCID-tbzs-axfh-77au", "summary": "Integer overflow in WebRTC in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Low)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5912.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.6", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5912.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5912", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00032", "scoring_system": "epss", "scoring_elements": "0.09357", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00062", "scoring_system": "epss", "scoring_elements": "0.1946", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00062", "scoring_system": "epss", "scoring_elements": "0.19413", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00062", "scoring_system": "epss", "scoring_elements": "0.19355", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.001", "scoring_system": "epss", "scoring_elements": "0.27639", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.001", "scoring_system": "epss", "scoring_elements": "0.27677", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.001", "scoring_system": "epss", "scoring_elements": "0.27703", "published_at": "2026-04-16T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5912" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5912", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5912" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456775", "reference_id": "2456775", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456775" }, { "reference_url": "https://issues.chromium.org/issues/486498791", "reference_id": "486498791", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-09T15:03:09Z/" } ], "url": "https://issues.chromium.org/issues/486498791" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-09T15:03:09Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5912" ], "risk_score": 4.3, "exploitability": "0.5", "weighted_severity": "8.6", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-tbzs-axfh-77au" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350927?format=api", "vulnerability_id": "VCID-tkx7-9rpf-pyeh", "summary": "Integer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5859.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.6", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5859.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5859", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00032", "scoring_system": "epss", "scoring_elements": "0.09325", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00032", "scoring_system": "epss", "scoring_elements": "0.09357", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00032", "scoring_system": "epss", "scoring_elements": "0.09366", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00032", "scoring_system": "epss", "scoring_elements": "0.09338", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.0008", "scoring_system": "epss", "scoring_elements": "0.23524", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.0008", "scoring_system": "epss", "scoring_elements": "0.23552", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.0008", "scoring_system": "epss", "scoring_elements": "0.23545", "published_at": "2026-04-18T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5859" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5859", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5859" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456812", "reference_id": "2456812", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456812" }, { "reference_url": "https://issues.chromium.org/issues/494158331", "reference_id": "494158331", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-10T03:55:37Z/" } ], "url": "https://issues.chromium.org/issues/494158331" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-10T03:55:37Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5859" ], "risk_score": 4.3, "exploitability": "0.5", "weighted_severity": "8.6", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-tkx7-9rpf-pyeh" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350943?format=api", "vulnerability_id": "VCID-tynp-q2w1-vkde", "summary": "Policy bypass in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5875.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5875.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5875", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00016", "scoring_system": "epss", "scoring_elements": "0.03459", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.0002", "scoring_system": "epss", "scoring_elements": "0.05317", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.0002", "scoring_system": "epss", "scoring_elements": "0.05329", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.0002", "scoring_system": "epss", "scoring_elements": "0.05306", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00025", "scoring_system": "epss", "scoring_elements": "0.0705", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00025", "scoring_system": "epss", "scoring_elements": "0.06931", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00025", "scoring_system": "epss", "scoring_elements": "0.06915", "published_at": "2026-04-18T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5875" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5875", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5875" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456790", "reference_id": "2456790", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456790" }, { "reference_url": "https://issues.chromium.org/issues/430198264", "reference_id": "430198264", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-11T03:00:07Z/" } ], "url": "https://issues.chromium.org/issues/430198264" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-11T03:00:07Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5875" ], "risk_score": 2.5, "exploitability": "0.5", "weighted_severity": "4.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-tynp-q2w1-vkde" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350951?format=api", "vulnerability_id": "VCID-uy3v-ru2f-fqcd", "summary": "Use after free in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5883.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.6", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5883.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5883", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00038", "scoring_system": "epss", "scoring_elements": "0.11391", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00038", "scoring_system": "epss", "scoring_elements": "0.11397", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00038", "scoring_system": "epss", "scoring_elements": "0.11363", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00038", "scoring_system": "epss", "scoring_elements": "0.11334", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.0005", "scoring_system": "epss", "scoring_elements": "0.15238", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00129", "scoring_system": "epss", "scoring_elements": "0.32341", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00129", "scoring_system": "epss", "scoring_elements": "0.32313", "published_at": "2026-04-21T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5883" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5883", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5883" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456769", "reference_id": "2456769", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456769" }, { "reference_url": "https://issues.chromium.org/issues/482958590", "reference_id": "482958590", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-09T17:36:45Z/" } ], "url": "https://issues.chromium.org/issues/482958590" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-09T17:36:45Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5883" ], "risk_score": 4.3, "exploitability": "0.5", "weighted_severity": "8.6", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-uy3v-ru2f-fqcd" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350976?format=api", "vulnerability_id": "VCID-v1qf-79xm-bbg2", "summary": "Integer overflow in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially exploit heap corruption via a crafted video file. (Chromium security severity: Low)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5908.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5908.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5908", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10393", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00068", "scoring_system": "epss", "scoring_elements": "0.2093", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00068", "scoring_system": "epss", "scoring_elements": "0.20886", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00068", "scoring_system": "epss", "scoring_elements": "0.20835", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00086", "scoring_system": "epss", "scoring_elements": "0.24846", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00086", "scoring_system": "epss", "scoring_elements": "0.24869", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00086", "scoring_system": "epss", "scoring_elements": "0.24875", "published_at": "2026-04-16T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5908" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5908", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5908" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456751", "reference_id": "2456751", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456751" }, { "reference_url": "https://issues.chromium.org/issues/485115554", "reference_id": "485115554", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-09T15:28:27Z/" } ], "url": "https://issues.chromium.org/issues/485115554" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-09T15:28:27Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5908" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "7.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-v1qf-79xm-bbg2" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350968?format=api", "vulnerability_id": "VCID-v5a1-1ceu-ebhv", "summary": "Policy bypass in Downloads in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to bypass of multi-download protections via a crafted HTML page. (Chromium security severity: Low)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5900.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5900.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5900", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00016", "scoring_system": "epss", "scoring_elements": "0.03367", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00016", "scoring_system": "epss", "scoring_elements": "0.03459", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00016", "scoring_system": "epss", "scoring_elements": "0.03418", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00016", "scoring_system": "epss", "scoring_elements": "0.0339", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00031", "scoring_system": "epss", "scoring_elements": "0.09021", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00031", "scoring_system": "epss", "scoring_elements": "0.08892", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00031", "scoring_system": "epss", "scoring_elements": "0.08875", "published_at": "2026-04-18T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5900" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5900", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5900" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456763", "reference_id": "2456763", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456763" }, { "reference_url": "https://issues.chromium.org/issues/475265304", "reference_id": "475265304", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-13T18:03:11Z/" } ], "url": "https://issues.chromium.org/issues/475265304" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-13T18:03:11Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5900" ], "risk_score": 1.9, "exploitability": "0.5", "weighted_severity": "3.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-v5a1-1ceu-ebhv" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350977?format=api", "vulnerability_id": "VCID-vghg-r559-kbes", "summary": "Integer overflow in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially exploit heap corruption via a crafted video file. (Chromium security severity: Low)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5909.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.6", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5909.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5909", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10393", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00068", "scoring_system": "epss", "scoring_elements": "0.2093", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00068", "scoring_system": "epss", "scoring_elements": "0.20886", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00068", "scoring_system": "epss", "scoring_elements": "0.20835", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00086", "scoring_system": "epss", "scoring_elements": "0.24846", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00086", "scoring_system": "epss", "scoring_elements": "0.24869", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00086", "scoring_system": "epss", "scoring_elements": "0.24875", "published_at": "2026-04-16T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5909" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5909", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5909" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456753", "reference_id": "2456753", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456753" }, { "reference_url": "https://issues.chromium.org/issues/485203821", "reference_id": "485203821", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-09T15:23:42Z/" } ], "url": "https://issues.chromium.org/issues/485203821" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-09T15:23:42Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5909" ], "risk_score": 4.3, "exploitability": "0.5", "weighted_severity": "8.6", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-vghg-r559-kbes" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350954?format=api", "vulnerability_id": "VCID-vxex-hv2g-gbhk", "summary": "Out of bounds read in WebAudio in Google Chrome on Mac prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5886.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5886.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5886", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00025", "scoring_system": "epss", "scoring_elements": "0.07086", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00025", "scoring_system": "epss", "scoring_elements": "0.07097", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00025", "scoring_system": "epss", "scoring_elements": "0.07076", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.0003", "scoring_system": "epss", "scoring_elements": "0.08657", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.0003", "scoring_system": "epss", "scoring_elements": "0.08518", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.0003", "scoring_system": "epss", "scoring_elements": "0.08505", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00032", "scoring_system": "epss", "scoring_elements": "0.09357", "published_at": "2026-04-09T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5886" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5886", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5886" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456781", "reference_id": "2456781", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456781" }, { "reference_url": "https://issues.chromium.org/issues/485397283", "reference_id": "485397283", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N" }, { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-10T18:38:06Z/" } ], "url": "https://issues.chromium.org/issues/485397283" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N" }, { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-10T18:38:06Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5886" ], "risk_score": 3.0, "exploitability": "0.5", "weighted_severity": "5.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-vxex-hv2g-gbhk" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350950?format=api", "vulnerability_id": "VCID-vz9s-2tc5-xqh7", "summary": "Incorrect security UI in Fullscreen in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5882.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5882.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5882", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00028", "scoring_system": "epss", "scoring_elements": "0.081", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00028", "scoring_system": "epss", "scoring_elements": "0.07941", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00028", "scoring_system": "epss", "scoring_elements": "0.07954", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10393", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10421", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10382", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.1036", "published_at": "2026-04-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5882" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5882", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5882" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456801", "reference_id": "2456801", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456801" }, { "reference_url": "https://issues.chromium.org/issues/480993682", "reference_id": "480993682", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-13T17:57:02Z/" } ], "url": "https://issues.chromium.org/issues/480993682" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-13T17:57:02Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5882" ], "risk_score": 2.5, "exploitability": "0.5", "weighted_severity": "4.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-vz9s-2tc5-xqh7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350958?format=api", "vulnerability_id": "VCID-w6jf-yzuk-rbbc", "summary": "Race in WebCodecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5890.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5890.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5890", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00027", "scoring_system": "epss", "scoring_elements": "0.07762", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00027", "scoring_system": "epss", "scoring_elements": "0.07613", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00029", "scoring_system": "epss", "scoring_elements": "0.0836", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00029", "scoring_system": "epss", "scoring_elements": "0.08314", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00029", "scoring_system": "epss", "scoring_elements": "0.08351", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00029", "scoring_system": "epss", "scoring_elements": "0.08331", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00038", "scoring_system": "epss", "scoring_elements": "0.11395", "published_at": "2026-04-16T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5890" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5890", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5890" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456770", "reference_id": "2456770", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456770" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5890" ], "risk_score": 3.0, "exploitability": "0.5", "weighted_severity": "5.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-w6jf-yzuk-rbbc" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350942?format=api", "vulnerability_id": "VCID-wcas-mvba-4bd3", "summary": "Use after free in PrivateAI in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5874.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.6", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5874.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5874", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10393", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00068", "scoring_system": "epss", "scoring_elements": "0.20886", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00068", "scoring_system": "epss", "scoring_elements": "0.2093", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00068", "scoring_system": "epss", "scoring_elements": "0.20835", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00118", "scoring_system": "epss", "scoring_elements": "0.30584", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00118", "scoring_system": "epss", "scoring_elements": "0.30636", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00118", "scoring_system": "epss", "scoring_elements": "0.30618", "published_at": "2026-04-18T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5874" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5874", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5874" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456798", "reference_id": "2456798", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456798" }, { "reference_url": "https://issues.chromium.org/issues/485397279", "reference_id": "485397279", "reference_type": "", "scores": [ { "value": "9.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-11T02:58:13Z/" } ], "url": "https://issues.chromium.org/issues/485397279" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "9.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-11T02:58:13Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5874" ], "risk_score": 4.3, "exploitability": "0.5", "weighted_severity": "8.6", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-wcas-mvba-4bd3" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350939?format=api", "vulnerability_id": "VCID-wsx4-jwca-7fh7", "summary": "Type Confusion in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5871.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.6", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5871.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5871", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00038", "scoring_system": "epss", "scoring_elements": "0.11334", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00038", "scoring_system": "epss", "scoring_elements": "0.11391", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00038", "scoring_system": "epss", "scoring_elements": "0.11397", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00038", "scoring_system": "epss", "scoring_elements": "0.11363", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00104", "scoring_system": "epss", "scoring_elements": "0.28254", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00104", "scoring_system": "epss", "scoring_elements": "0.28321", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00104", "scoring_system": "epss", "scoring_elements": "0.283", "published_at": "2026-04-18T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5871" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5871", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5871" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456792", "reference_id": "2456792", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456792" }, { "reference_url": "https://issues.chromium.org/issues/495679730", "reference_id": "495679730", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-10T03:55:53Z/" } ], "url": "https://issues.chromium.org/issues/495679730" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-04-10T03:55:53Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5871" ], "risk_score": 4.3, "exploitability": "0.5", "weighted_severity": "8.6", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-wsx4-jwca-7fh7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350935?format=api", "vulnerability_id": "VCID-xtzf-12qm-y3e5", "summary": "Heap buffer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5867.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5867.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5867", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00029", "scoring_system": "epss", "scoring_elements": "0.0813", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00029", "scoring_system": "epss", "scoring_elements": "0.0828", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00029", "scoring_system": "epss", "scoring_elements": "0.08116", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.0003", "scoring_system": "epss", "scoring_elements": "0.08481", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00054", "scoring_system": "epss", "scoring_elements": "0.1703", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00054", "scoring_system": "epss", "scoring_elements": "0.16984", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00054", "scoring_system": "epss", "scoring_elements": "0.16924", "published_at": "2026-04-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5867" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5867", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5867" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456760", "reference_id": "2456760", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456760" }, { "reference_url": "https://issues.chromium.org/issues/492668885", "reference_id": "492668885", "reference_type": "", "scores": [ { "value": "3.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" }, { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" }, { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-13T13:44:15Z/" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-10T18:44:31Z/" } ], "url": "https://issues.chromium.org/issues/492668885" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "3.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" }, { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" }, { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-13T13:44:15Z/" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-10T18:44:31Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5867" ], "risk_score": 3.0, "exploitability": "0.5", "weighted_severity": "5.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-xtzf-12qm-y3e5" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350963?format=api", "vulnerability_id": "VCID-xz23-yr7q-1fgq", "summary": "Incorrect security UI in Omnibox in Google Chrome on iOS prior to 147.0.7727.55 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name. (Chromium security severity: Low)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5895.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5895.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5895", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10393", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10421", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10382", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.1036", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00067", "scoring_system": "epss", "scoring_elements": "0.20779", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00067", "scoring_system": "epss", "scoring_elements": "0.20802", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00067", "scoring_system": "epss", "scoring_elements": "0.20794", "published_at": "2026-04-18T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5895" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5895", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5895" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457216", "reference_id": "2457216", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457216" }, { "reference_url": "https://issues.chromium.org/issues/374285495", "reference_id": "374285495", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-13T20:10:22Z/" } ], "url": "https://issues.chromium.org/issues/374285495" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-13T20:10:22Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5895" ], "risk_score": 1.9, "exploitability": "0.5", "weighted_severity": "3.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-xz23-yr7q-1fgq" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350959?format=api", "vulnerability_id": "VCID-y6r7-wj7c-p3bn", "summary": "Insufficient policy enforcement in browser UI in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5891.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.1", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5891.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5891", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00032", "scoring_system": "epss", "scoring_elements": "0.09357", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00032", "scoring_system": "epss", "scoring_elements": "0.09366", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00032", "scoring_system": "epss", "scoring_elements": "0.09338", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00032", "scoring_system": "epss", "scoring_elements": "0.09325", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00054", "scoring_system": "epss", "scoring_elements": "0.16831", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00054", "scoring_system": "epss", "scoring_elements": "0.16794", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00054", "scoring_system": "epss", "scoring_elements": "0.16799", "published_at": "2026-04-18T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5891" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5891", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5891" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456771", "reference_id": "2456771", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456771" }, { "reference_url": "https://issues.chromium.org/issues/487471101", "reference_id": "487471101", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-13T20:15:19Z/" } ], "url": "https://issues.chromium.org/issues/487471101" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-13T20:15:19Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5891" ], "risk_score": 1.9, "exploitability": "0.5", "weighted_severity": "3.7", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-y6r7-wj7c-p3bn" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/350955?format=api", "vulnerability_id": "VCID-z2gp-g2h2-x3bm", "summary": "Insufficient validation of untrusted input in Downloads in Google Chrome on Windows prior to 147.0.7727.55 allowed a remote attacker to bypass download restrictions via a crafted HTML page. (Chromium security severity: Medium)", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5887.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5887.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5887", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00021", "scoring_system": "epss", "scoring_elements": "0.05561", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00021", "scoring_system": "epss", "scoring_elements": "0.05608", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00021", "scoring_system": "epss", "scoring_elements": "0.0558", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00021", "scoring_system": "epss", "scoring_elements": "0.05568", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10283", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10179", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10152", "published_at": "2026-04-18T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-5887" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5887", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5887" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456766", "reference_id": "2456766", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456766" }, { "reference_url": "https://issues.chromium.org/issues/486079015", "reference_id": "486079015", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-13T17:58:46Z/" } ], "url": "https://issues.chromium.org/issues/486079015" }, { "reference_url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html", "reference_id": "stable-channel-update-for-desktop.html", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-13T17:58:46Z/" } ], "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/582089?format=api", "purl": "pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@143.0.7499.169-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/582090?format=api", "purl": "pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@145.0.7632.159-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062447?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062448?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1062444?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.55-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1sea-z3vg-wfc4" }, { "vulnerability": "VCID-212t-kjka-pbe4" }, { "vulnerability": "VCID-3c8j-6wcw-83ax" }, { "vulnerability": "VCID-47az-428z-bkar" }, { "vulnerability": "VCID-7x3z-8d6t-vfen" }, { "vulnerability": "VCID-8j9g-6zs1-13am" }, { "vulnerability": "VCID-97y1-b8j2-xfb5" }, { "vulnerability": "VCID-9amk-6z38-qbb1" }, { "vulnerability": "VCID-9h91-43nj-7qgy" }, { "vulnerability": "VCID-dzf3-492x-budu" }, { "vulnerability": "VCID-erxp-a8pr-zyff" }, { "vulnerability": "VCID-fk6m-8k4f-hyhz" }, { "vulnerability": "VCID-hyew-s4ya-43bv" }, { "vulnerability": "VCID-jd9x-rsee-ekfk" }, { "vulnerability": "VCID-jku3-pwsy-bufq" }, { "vulnerability": "VCID-jqs4-fgj9-63g7" }, { "vulnerability": "VCID-k82r-r6dh-qfem" }, { "vulnerability": "VCID-mjv9-578z-3kej" }, { "vulnerability": "VCID-mp8f-94vu-jyf9" }, { "vulnerability": "VCID-my86-8n81-y3hd" }, { "vulnerability": "VCID-ndkj-5v64-cfa9" }, { "vulnerability": "VCID-p4dd-y4mm-fqam" }, { "vulnerability": "VCID-q17c-ud54-5ydd" }, { "vulnerability": "VCID-qrwz-k5dg-27b2" }, { "vulnerability": "VCID-thk2-w3k4-jfep" }, { "vulnerability": "VCID-uded-9de1-xkdj" }, { "vulnerability": "VCID-usvm-2xea-ffd6" }, { "vulnerability": "VCID-uyu5-b3md-37cm" }, { "vulnerability": "VCID-x1xm-1qpa-u7c1" }, { "vulnerability": "VCID-x688-21pv-7yf8" }, { "vulnerability": "VCID-ywwf-hc75-nbdm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067515?format=api", "purl": "pkg:deb/debian/chromium@147.0.7727.101-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.101-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2026-5887" ], "risk_score": 1.9, "exploitability": "0.5", "weighted_severity": "3.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-z2gp-g2h2-x3bm" } ], "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/chromium@147.0.7727.55-1~deb13u1%3Fdistro=trixie" }