crítica
CVE-2026-87500
chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via crafted HTML page
En la Trivy database desde, como mínimo, el 24 oct 2026, 07:11 UTCNo consta cuándo entró antes de ese build.
Severidad por fuente
Red Hat9.6CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
La etiqueta propia de Trivy es CRITICAL. Crítica según Red Hat, AlmaLinux, Oracle, Rocky Linux.
Descripción
Improper validation of array index in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| alma 8 | webkit2gtk3, webkit2gtk3-devel, webkit2gtk3-jsc y 1 más | 2.54.1-1.el8_10 |
| alma 9 | webkit2gtk3, webkit2gtk3-devel, webkit2gtk3-jsc y 1 más | 2.54.1-1.el9_8 |
| Oracle Linux 8 | webkit2gtk3, webkit2gtk3-devel, webkit2gtk3-jsc y 1 más | 2.54.1-1.el8_10 |
| Oracle Linux 9 | webkit2gtk3, webkit2gtk3-devel, webkit2gtk3-jsc y 1 más | 2.54.1-1.el9_8 |
| Red Hat | webkitgtk4, webkitgtk4-devel, webkitgtk4-doc y 3 más | sin corrección indicada |
| rocky 8 | webkit2gtk3, webkit2gtk3-devel, webkit2gtk3-jsc y 1 más | 2.54.1-1.el8_10 |
| rocky 9 | webkit2gtk3, webkit2gtk3-devel, webkit2gtk3-jsc y 1 más | 2.54.1-1.el9_8 |
| debian 11 | chromium | sin corrección indicada |
| debian 12 | chromium | 153.0.8010.52-1~deb12u1 |
| debian 13 | chromium | 153.0.8010.47-2~deb13u1 |
| debian 14 | chromium | 153.0.8010.47-1 |
| echo | chromium | 153.0.8010.36 |
Mostrar las 68 entradas de 20 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| alma 8 | webkit2gtk3 | 2.54.1-1.el8_10 |
| alma 8 | webkit2gtk3-devel | 2.54.1-1.el8_10 |
| alma 8 | webkit2gtk3-jsc | 2.54.1-1.el8_10 |
| alma 8 | webkit2gtk3-jsc-devel | 2.54.1-1.el8_10 |
| alma 9 | webkit2gtk3 | 2.54.1-1.el9_8 |
| alma 9 | webkit2gtk3-devel | 2.54.1-1.el9_8 |
| alma 9 | webkit2gtk3-jsc | 2.54.1-1.el9_8 |
| alma 9 | webkit2gtk3-jsc-devel | 2.54.1-1.el9_8 |
| Oracle Linux 8 | webkit2gtk3 | 2.54.1-1.el8_10 |
| Oracle Linux 8 | webkit2gtk3-devel | 2.54.1-1.el8_10 |
| Oracle Linux 8 | webkit2gtk3-jsc | 2.54.1-1.el8_10 |
| Oracle Linux 8 | webkit2gtk3-jsc-devel | 2.54.1-1.el8_10 |
| Oracle Linux 9 | webkit2gtk3 | 2.54.1-1.el9_8 |
| Oracle Linux 9 | webkit2gtk3-devel | 2.54.1-1.el9_8 |
| Oracle Linux 9 | webkit2gtk3-jsc | 2.54.1-1.el9_8 |
| Oracle Linux 9 | webkit2gtk3-jsc-devel | 2.54.1-1.el9_8 |
| Red Hat | webkitgtk4 | sin corrección indicada |
| Red Hat | webkitgtk4-devel | sin corrección indicada |
| Red Hat | webkitgtk4-doc | sin corrección indicada |
| Red Hat | webkitgtk4-jsc | sin corrección indicada |
| Red Hat | webkitgtk4-jsc-devel | sin corrección indicada |
| Red Hat | webkitgtk4-plugin-process-gtk2 | sin corrección indicada |
| rocky 8 | webkit2gtk3 | 2.54.1-1.el8_10 |
| rocky 8 | webkit2gtk3-devel | 2.54.1-1.el8_10 |
| rocky 8 | webkit2gtk3-jsc | 2.54.1-1.el8_10 |
| rocky 8 | webkit2gtk3-jsc-devel | 2.54.1-1.el8_10 |
| rocky 9 | webkit2gtk3 | 2.54.1-1.el9_8 |
| rocky 9 | webkit2gtk3-devel | 2.54.1-1.el9_8 |
| rocky 9 | webkit2gtk3-jsc | 2.54.1-1.el9_8 |
| rocky 9 | webkit2gtk3-jsc-devel | 2.54.1-1.el9_8 |
| debian 11 | chromium | sin corrección indicada |
| debian 12 | chromium | 153.0.8010.52-1~deb12u1 |
| debian 13 | chromium | 153.0.8010.47-2~deb13u1 |
| debian 14 | chromium | 153.0.8010.47-1 |
| echo | chromium | 153.0.8010.36 |
| minimos | chromium | 153.0.8010.36-r0 |
| rapidfort alma 9 | webkit2gtk3 | 2.54.1-1.el9_8 |
| rapidfort alma 9 | webkit2gtk3-devel | 2.54.1-1.el9_8 |
| rapidfort alma 9 | webkit2gtk3-jsc | 2.54.1-1.el9_8 |
| rapidfort alma 9 | webkit2gtk3-jsc-devel | 2.54.1-1.el9_8 |
| rapidfort debian 12 | chromium | 0:153.0.8010.47-1, 0:153.0.8010.47-2~deb13u1, 0:153.0.8010.52-1~deb12u1 |
| rapidfort debian 13 | chromium | 0:153.0.8010.47-1, 0:153.0.8010.47-2~deb13u1, 0:153.0.8010.52-1~deb12u1 |
| rapidfort fedora 43 | chromedriver | 153.0.8010.36-1.fc43 |
| rapidfort fedora 43 | chromium | 153.0.8010.36-1.fc43 |
| rapidfort fedora 43 | chromium-common | 153.0.8010.36-1.fc43 |
| rapidfort fedora 43 | chromium-headless | 153.0.8010.36-1.fc43 |
| rapidfort fedora 43 | chromium-qt5-ui | 153.0.8010.36-1.fc43 |
| rapidfort fedora 43 | chromium-qt6-ui | 153.0.8010.36-1.fc43 |
| rapidfort Oracle Linux 10 | chromedriver | 153.0.8010.36-1.el10_4 |
| rapidfort Oracle Linux 10 | chromium | 153.0.8010.36-1.el10_4 |
| rapidfort Oracle Linux 10 | chromium-common | 153.0.8010.36-1.el10_4 |
| rapidfort Oracle Linux 10 | chromium-headless | 153.0.8010.36-1.el10_4 |
| rapidfort Oracle Linux 10 | chromium-qt5-ui | 153.0.8010.36-1.el10_4 |
| rapidfort Oracle Linux 10 | chromium-qt6-ui | 153.0.8010.36-1.el10_4 |
| rapidfort Oracle Linux 9 | chromedriver | 153.0.8010.36-1.el9 |
| rapidfort Oracle Linux 9 | chromium | 153.0.8010.36-1.el9 |
| rapidfort Oracle Linux 9 | chromium-common | 153.0.8010.36-1.el9 |
| rapidfort Oracle Linux 9 | chromium-headless | 153.0.8010.36-1.el9 |
| rapidfort Oracle Linux 9 | chromium-qt5-ui | 153.0.8010.36-1.el9 |
| rapidfort Oracle Linux 9 | chromium-qt6-ui | 153.0.8010.36-1.el9 |
| rapidfort Oracle Linux 9 | webkit2gtk3 | 0:2.54.1-1.el9_8 |
| rapidfort Oracle Linux 9 | webkit2gtk3-devel | 0:2.54.1-1.el9_8 |
| rapidfort Oracle Linux 9 | webkit2gtk3-jsc | 0:2.54.1-1.el9_8 |
| rapidfort Oracle Linux 9 | webkit2gtk3-jsc-devel | 0:2.54.1-1.el9_8 |
| rapidfort rocky 9 | webkit2gtk3 | 0:2.54.1-1.el9_8 |
| rapidfort rocky 9 | webkit2gtk3-devel | 0:2.54.1-1.el9_8 |
| rapidfort rocky 9 | webkit2gtk3-jsc | 0:2.54.1-1.el9_8 |
| rapidfort rocky 9 | webkit2gtk3-jsc-devel | 0:2.54.1-1.el9_8 |
Referencias
- https://access.redhat.com/errata/RHSA-2026:84583
- https://access.redhat.com/security/cve/CVE-2026-87500
- https://bugzilla.redhat.com/2530272
- https://bugzilla.redhat.com/2530296
- https://bugzilla.redhat.com/2530305
- https://bugzilla.redhat.com/2530333
- https://bugzilla.redhat.com/2530389
- https://bugzilla.redhat.com/2530396
Las 44 referencias
- https://bugzilla.redhat.com/2530447
- https://bugzilla.redhat.com/2530458
- https://bugzilla.redhat.com/2530475
- https://bugzilla.redhat.com/2534404
- https://bugzilla.redhat.com/2534673
- https://bugzilla.redhat.com/show_bug.cgi?id=2530272
- https://bugzilla.redhat.com/show_bug.cgi?id=2530296
- https://bugzilla.redhat.com/show_bug.cgi?id=2530305
- https://bugzilla.redhat.com/show_bug.cgi?id=2530333
- https://bugzilla.redhat.com/show_bug.cgi?id=2530389
- https://bugzilla.redhat.com/show_bug.cgi?id=2530396
- https://bugzilla.redhat.com/show_bug.cgi?id=2530447
- https://bugzilla.redhat.com/show_bug.cgi?id=2530458
- https://bugzilla.redhat.com/show_bug.cgi?id=2530475
- https://bugzilla.redhat.com/show_bug.cgi?id=2534404
- https://bugzilla.redhat.com/show_bug.cgi?id=2534673
- https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html
- https://creativecommons.org/licenses/by/4.0/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-87500
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-87512
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-87586
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-87596
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-87602
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-87604
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-87621
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-87648
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-87654
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91720
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91738
- https://errata.almalinux.org/9/ALSA-2026-84583.html
- https://errata.rockylinux.org/RLSA-2026:84583
- https://issues.chromium.org/issues/540019091
- https://linux.oracle.com/cve/CVE-2026-87500.html
- https://linux.oracle.com/errata/ELSA-2026-84584.html
- https://nvd.nist.gov/vuln/detail/CVE-2026-87500
- https://www.cve.org/CVERecord?id=CVE-2026-87500