Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/chromium@135.0.7049.52-1~deb12u1?distro=trixie
purl pkg:deb/debian/chromium@135.0.7049.52-1~deb12u1?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (8)
Vulnerability Summary Aliases
VCID-4a82-wdqx-2ub1 Inappropriate implementation in Custom Tabs in Google Chrome prior to 135.0.7049.52 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) CVE-2025-3072
VCID-699p-7mfs-2yf5 Inappropriate implementation in Downloads in Google Chrome prior to 135.0.7049.52 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) CVE-2025-3074
VCID-6fhm-q7k7-n3dw Inappropriate implementation in Navigations in Google Chrome prior to 135.0.7049.52 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass same origin policy via a crafted HTML page. (Chromium security severity: Low) CVE-2025-3071
VCID-kj7m-t28f-akce Inappropriate implementation in Autofill in Google Chrome prior to 135.0.7049.52 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) CVE-2025-3073
VCID-nku3-ejb7-e7av Inappropriate implementation in Extensions in Google Chrome prior to 135.0.7049.52 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium) CVE-2025-3069
VCID-rs7n-jww2-k7fa Inappropriate implementation in Intents in Google Chrome on Android prior to 135.0.7049.52 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium) CVE-2025-3068
VCID-vrrj-pznc-cfdx Insufficient validation of untrusted input in Extensions in Google Chrome prior to 135.0.7049.52 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium) CVE-2025-3070
VCID-wv9g-rq72-hfct Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 135.0.7049.52 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform privilege escalation via a crafted app. (Chromium security severity: Medium) CVE-2025-3067

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-17T22:42:14.444347+00:00 Debian Importer Fixing VCID-699p-7mfs-2yf5 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-17T22:42:14.312842+00:00 Debian Importer Fixing VCID-kj7m-t28f-akce https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-17T22:42:14.181553+00:00 Debian Importer Fixing VCID-4a82-wdqx-2ub1 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-17T22:42:14.049823+00:00 Debian Importer Fixing VCID-6fhm-q7k7-n3dw https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-17T22:42:13.919776+00:00 Debian Importer Fixing VCID-vrrj-pznc-cfdx https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-17T22:42:13.798083+00:00 Debian Importer Fixing VCID-nku3-ejb7-e7av https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-17T22:42:13.674072+00:00 Debian Importer Fixing VCID-rs7n-jww2-k7fa https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-17T22:42:13.540945+00:00 Debian Importer Fixing VCID-wv9g-rq72-hfct https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-12T17:48:48.824956+00:00 Debian Importer Fixing VCID-699p-7mfs-2yf5 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-12T17:48:48.737466+00:00 Debian Importer Fixing VCID-kj7m-t28f-akce https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-12T17:48:48.651275+00:00 Debian Importer Fixing VCID-4a82-wdqx-2ub1 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-12T17:48:48.565372+00:00 Debian Importer Fixing VCID-6fhm-q7k7-n3dw https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-12T17:48:48.479129+00:00 Debian Importer Fixing VCID-vrrj-pznc-cfdx https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-12T17:48:48.393022+00:00 Debian Importer Fixing VCID-nku3-ejb7-e7av https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-12T17:48:48.306868+00:00 Debian Importer Fixing VCID-rs7n-jww2-k7fa https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-12T17:48:48.220791+00:00 Debian Importer Fixing VCID-wv9g-rq72-hfct https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:21:01.869653+00:00 Debian Importer Fixing VCID-699p-7mfs-2yf5 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:21:01.835880+00:00 Debian Importer Fixing VCID-kj7m-t28f-akce https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:21:01.804443+00:00 Debian Importer Fixing VCID-4a82-wdqx-2ub1 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:21:01.774577+00:00 Debian Importer Fixing VCID-6fhm-q7k7-n3dw https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:21:01.744515+00:00 Debian Importer Fixing VCID-vrrj-pznc-cfdx https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:21:01.714455+00:00 Debian Importer Fixing VCID-nku3-ejb7-e7av https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:21:01.684245+00:00 Debian Importer Fixing VCID-rs7n-jww2-k7fa https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:21:01.653794+00:00 Debian Importer Fixing VCID-wv9g-rq72-hfct https://security-tracker.debian.org/tracker/data/json 38.1.0