chromium -- security fixes

2026-06-15 · CVE-2026-12437, CVE-2026-12438, CVE-2026-12439, CVE-2026-12440, CVE-2026-12441, CVE-2026-12442, CVE-2026-12443, CVE-2026-12444, CVE-2026-12445, CVE-2026-12446, CVE-2026-12447, CVE-2026-12448, CVE-2026-12449, CVE-2026-12450, CVE-2026-12451, CVE-2026-12452, CVE-2026-12453, CVE-2026-12454, CVE-2026-12455, CVE-2026-12456, CVE-2026-12457, CVE-2026-12458, CVE-2026-12459, CVE-2026-12460, CVE-2026-12461, CVE-2026-12462, CVE-2026-12463, CVE-2026-12464, CVE-2026-12465, CVE-2026-12466, CVE-2026-12467, CVE-2026-12468, CVE-2026-12469 · VuXML entry

Chrome Releases reports: This update includes 33 security fixes: [516496659] Critical CVE-2026-12437: Use after free in WebShare. [516947912] Critical CVE-2026-12438: Inappropriate implementation in WebView. [519728275] Critical CVE-2026-12439: Use after free in Digital Credentials. [519731619] Critical CVE-2026-12440: Use after free in DigitalCredentials. [520157118] Critical CVE-2026-12441: Use after free in File …

Affected versions

• chromium < 149.0.7827.155
• ungoogled-chromium < 149.0.7827.155

By system

1 still vulnerable, 2 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.