chromium -- security fixes

2026-11-01 · CVE-2026-118306, CVE-2026-118331, CVE-2026-118348, CVE-2026-118344, CVE-2026-118357, CVE-2026-118318, CVE-2026-118350, CVE-2026-118339, CVE-2026-118305, CVE-2026-118317, CVE-2026-118320, CVE-2026-118322, CVE-2026-118329, CVE-2026-118354, CVE-2026-118340, CVE-2026-118321, CVE-2026-118337, CVE-2026-118352, CVE-2026-118355, CVE-2026-118307, CVE-2026-118351, CVE-2026-118328, CVE-2026-118333, CVE-2026-118336, CVE-2026-118358, CVE-2026-118353, CVE-2026-118349, CVE-2026-118327, CVE-2026-118359, CVE-2026-118343, CVE-2026-118311, CVE-2026-118334, CVE-2026-118332, CVE-2026-118313, CVE-2026-118345, CVE-2026-118304, CVE-2026-118316, CVE-2026-118346, CVE-2026-118342, CVE-2026-118310, CVE-2026-118335, CVE-2026-118308, CVE-2026-118314, CVE-2026-118347, CVE-2026-118341, CVE-2026-118330, CVE-2026-118315, CVE-2026-118356, CVE-2026-118309, CVE-2026-118319, CVE-2026-118312, CVE-2026-118338 · VuXML entry

Chrome Releases reports: This update includes 52 security fixes: [571156746] Critical CVE-2026-118306: Memory corruption in FileSystem. [572193211] Critical CVE-2026-118331: Improper input validation in FileAPI. [574776938] Critical CVE-2026-118348: Improper input validation in Skia. [574852698] Critical CVE-2026-118344: Use after free in Layout. [562191732] High CVE-2026-118357: Use after free in FileSystem. …

Affected versions

• chromium < 156.0.8078.73
• ungoogled-chromium < 156.0.8078.73
• linux-chrome < 156.0.8078.73

By system

2 still vulnerable, 3 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.