Google Chrome / Microsoft Edge: Mehrere Schwachstellen
WID-SEC-2026-3737 · first 05.10.2026 · updated 20.10.2026 · CVSS 9,6
What it is about
Chrome ist ein Internet-Browser von Google. Edge ist ein Internet-Browser von Microsoft. Ein Angreifer kann mehrere Schwachstellen in Google Chrome / Microsoft Edge ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, Informationen offenzulegen, Daten zu verfälschen oder zu manipulieren oder Denial-of-Service-Zustände zu verursachen.
Under what conditions?
The BSI does not name any particular preconditions. Exploitable remotely according to the BSI.
What can happen in the worst case
An attacker could use the vulnerability to
- beliebigen Programmcode auszuführen
- Sicherheitsmaßnahmen zu umgehen
- Informationen offenzulegen
- Daten zu verfälschen oder zu manipulieren oder Denial-of-Service-Zustände zu verursachen
Am I affected?
Affected according to the BSI:
- Debian Linux
- Fedora Linux
- SUSE openSUSE
- Google Chrome <154.0.8037.97
- Google Chrome <154.0.8037.98
- Microsoft Edge <154.0.4258.62
The installed version is usually shown under “Help → About” or in the device’s admin interface.
What helps?
Update to at least:
- Google Chrome 154.0.8037.97
- Google Chrome 154.0.8037.98
- Microsoft Edge 154.0.4258.62
Is the vulnerability already being exploited?
None of the CVEs is in the CISA catalogue of exploited vulnerabilities. That does not mean there are no attacks, only that none are documented.
Information and sources
- Original BSI advisory (WID)
- Chrome Releases: Stable Channel Update for Desktop vom 2026-10-04 chromereleases.googleblog.com
- Release notes for Microsoft Edge Security Updates vom 2026-10-05 learn.microsoft.com
- Fedora Security Advisory FEDORA-2026-02902C2FA0 vom 2026-10-06 bodhi.fedoraproject.org
- Fedora Security Advisory FEDORA-EPEL-2026-B3497ED039 vom 2026-10-06 bodhi.fedoraproject.org
- Fedora Security Advisory FEDORA-EPEL-2026-923AC1E238 vom 2026-10-06 bodhi.fedoraproject.org
- Fedora Security Advisory FEDORA-EPEL-2026-421DD4A529 vom 2026-10-06 bodhi.fedoraproject.org
- Fedora Security Advisory FEDORA-EPEL-2026-D1C26F4FFD vom 2026-10-06 bodhi.fedoraproject.org
- Fedora Security Advisory FEDORA-2026-BCDFA4C7DB vom 2026-10-06 bodhi.fedoraproject.org
- Fedora Security Advisory FEDORA-2026-53C8ACA50A vom 2026-10-06 bodhi.fedoraproject.org
- openSUSE Security Update OPENSUSE-SU-2026:0345-1 vom 2026-10-06 lists.opensuse.org
- openSUSE Security Update OPENSUSE-SU-2026:22023-1 vom 2026-10-07 lists.opensuse.org
- Debian Security Advisory DSA-6553 vom 2026-10-12 security-tracker.debian.org
- Debian Security Advisory DLA-4833 vom 2026-10-13 lists.debian.org
- openSUSE Security Update OPENSUSE-SU-2026:12063-1 vom 2026-10-19 lists.opensuse.org
CVE: CVE-2026-103621, CVE-2026-103622, CVE-2026-103623, CVE-2026-103624, CVE-2026-103625, CVE-2026-103626, CVE-2026-103627, CVE-2026-103628, CVE-2026-103629, CVE-2026-103630, CVE-2026-103631
Source: BSI warning and information service (CERT-Bund); CISA. The assessment of the conditions is my reading of the BSI text; the external pages are in their original language.