chromium -- security fixes

2026-08-13 · CVE-2026-19137, CVE-2026-19149, CVE-2026-19154, CVE-2026-19157, CVE-2026-19170, CVE-2026-19172, CVE-2026-19169, CVE-2026-19168, CVE-2026-19138, CVE-2026-19139, CVE-2026-19140, CVE-2026-19141, CVE-2026-19142, CVE-2026-19143, CVE-2026-19144, CVE-2026-19145, CVE-2026-19146, CVE-2026-19147, CVE-2026-19148, CVE-2026-19150, CVE-2026-19151, CVE-2026-19152, CVE-2026-19153, CVE-2026-19155, CVE-2026-19156, CVE-2026-19158, CVE-2026-19159, CVE-2026-19160, CVE-2026-19161, CVE-2026-19162, CVE-2026-19163, CVE-2026-19164, CVE-2026-19165, CVE-2026-19166, CVE-2026-19167, CVE-2026-19171, CVE-2026-19173, CVE-2026-19174, CVE-2026-19175, CVE-2026-19176, CVE-2026-19177 · VuXML entry

Chrome Releases reports: This update includes 41 security fixes: [499602793] Critical CVE-2026-19137: Use after free in WebGL. [524824288] Critical CVE-2026-19149: Use after free in ura. [532941869] Critical CVE-2026-19154: Use after free in Skia. [534903095] Critical CVE-2026-19157: Out of bounds write in GLE. [537729021] Critical CVE-2026-19170: Use after free in WebGL. [537838324] Critical CVE-2026-19172: Use …

Affected versions

• chromium < 151.0.7922.108
• ungoogled-chromium < 151.0.7922.108

By system

1 still vulnerable, 2 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.