Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/chromium@140.0.7339.80-1~deb12u1?distro=trixie
purl pkg:deb/debian/chromium@140.0.7339.80-1~deb12u1?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (9)
Vulnerability Summary Aliases
VCID-1yv3-9hvy-wqad Inappropriate implementation in Passkeys in Google Chrome prior to 140.0.7339.80 allowed a local attacker to obtain potentially sensitive information via debug logs. (Chromium security severity: Low) CVE-2025-12910
VCID-5z4q-511c-3yfg Inappropriate implementation in Toolbar in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform domain spoofing via a crafted HTML page. (Chromium security severity: Medium) CVE-2025-9865
VCID-6wb7-8x4p-dkgt Inappropriate implementation in Permissions in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) CVE-2025-12906
VCID-hhme-jc9c-wua5 Inappropriate implementation in Extensions in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium) CVE-2025-9866
VCID-k4kf-hvym-nfd6 Insufficient policy enforcement in Devtools in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to leak cross-origin data via Devtools. (Chromium security severity: Low) CVE-2025-12909
VCID-t6a7-tdcw-zuhv Insufficient validation of untrusted input in Devtools in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to execute arbitrary code via user action in Devtools. (Chromium security severity: Low) CVE-2025-12907
VCID-vfpj-s32r-fygb chromium-browser: Inappropriate implementation in Compositing CVE-2025-13107
VCID-z745-kejm-sbf2 Inappropriate implementation in Permissions in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) CVE-2025-12911
VCID-zkqv-ppkf-yfe2 Inappropriate implementation in Downloads in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) CVE-2025-9867

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-17T22:42:21.275610+00:00 Debian Importer Fixing VCID-zkqv-ppkf-yfe2 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-17T22:42:21.140645+00:00 Debian Importer Fixing VCID-hhme-jc9c-wua5 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-17T22:42:20.996913+00:00 Debian Importer Fixing VCID-5z4q-511c-3yfg https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-17T22:42:07.632694+00:00 Debian Importer Fixing VCID-vfpj-s32r-fygb https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-17T22:42:07.146656+00:00 Debian Importer Fixing VCID-z745-kejm-sbf2 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-17T22:42:07.004697+00:00 Debian Importer Fixing VCID-1yv3-9hvy-wqad https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-17T22:42:06.867293+00:00 Debian Importer Fixing VCID-k4kf-hvym-nfd6 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-17T22:42:06.652730+00:00 Debian Importer Fixing VCID-t6a7-tdcw-zuhv https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-17T22:42:06.504774+00:00 Debian Importer Fixing VCID-6wb7-8x4p-dkgt https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-12T17:48:53.665951+00:00 Debian Importer Fixing VCID-zkqv-ppkf-yfe2 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-12T17:48:53.565471+00:00 Debian Importer Fixing VCID-hhme-jc9c-wua5 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-12T17:48:53.467167+00:00 Debian Importer Fixing VCID-5z4q-511c-3yfg https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-12T17:48:44.120611+00:00 Debian Importer Fixing VCID-vfpj-s32r-fygb https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-12T17:48:43.768937+00:00 Debian Importer Fixing VCID-z745-kejm-sbf2 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-12T17:48:43.666467+00:00 Debian Importer Fixing VCID-1yv3-9hvy-wqad https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-12T17:48:43.563059+00:00 Debian Importer Fixing VCID-k4kf-hvym-nfd6 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-12T17:48:43.408975+00:00 Debian Importer Fixing VCID-t6a7-tdcw-zuhv https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-12T17:48:43.308383+00:00 Debian Importer Fixing VCID-6wb7-8x4p-dkgt https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:21:03.694502+00:00 Debian Importer Fixing VCID-zkqv-ppkf-yfe2 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:21:03.659317+00:00 Debian Importer Fixing VCID-hhme-jc9c-wua5 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:21:03.623478+00:00 Debian Importer Fixing VCID-5z4q-511c-3yfg https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:21:00.050123+00:00 Debian Importer Fixing VCID-vfpj-s32r-fygb https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:20:59.906486+00:00 Debian Importer Fixing VCID-z745-kejm-sbf2 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:20:59.866623+00:00 Debian Importer Fixing VCID-1yv3-9hvy-wqad https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:20:59.826662+00:00 Debian Importer Fixing VCID-k4kf-hvym-nfd6 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:20:59.767381+00:00 Debian Importer Fixing VCID-t6a7-tdcw-zuhv https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:20:59.726909+00:00 Debian Importer Fixing VCID-6wb7-8x4p-dkgt https://security-tracker.debian.org/tracker/data/json 38.1.0