Google Chrome / Microsoft Edge: Mehrere Schwachstellen
WID-SEC-2026-3982 · first 16.10.2026 · updated 26.10.2026 · CVSS 8,8
What it is about
Chrome ist ein Internet-Browser von Google. Edge ist ein Internet-Browser von Microsoft. Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Chrome / Microsoft Edge ausnutzen, um beliebigen Programmcode auszuführen oder einen Denial of Service herbeizuführen.
Under what conditions?
Over the network and without logging in. This is the most dangerous combination: attackers can scan reachable devices automatically.
What can happen in the worst case
An attacker could use the vulnerability to
- beliebigen Programmcode auszuführen oder einen Denial of Service herbeizuführen
Am I affected?
Affected according to the BSI:
- Debian Linux
- Fedora Linux
- SUSE openSUSE
- Google Chrome <152.0.7977.169
- Google Chrome <155.0.8059.84
- Google Chrome <155.0.8059.85
- Microsoft Edge <155.0.4283.62
The installed version is usually shown under “Help → About” or in the device’s admin interface.
What helps?
Update to at least:
- Google Chrome 152.0.7977.169
- Google Chrome 155.0.8059.84
- Google Chrome 155.0.8059.85
- Microsoft Edge 155.0.4283.62
Is the vulnerability already being exploited?
None of the CVEs is in the CISA catalogue of exploited vulnerabilities. That does not mean there are no attacks, only that none are documented.
Information and sources
- Original BSI advisory (WID)
- Google Chrome Extended Stable Update vom 2026-10-15 chromereleases.googleblog.com
- Google Chrome Stable Channel Update vom 2026-10-15 chromereleases.googleblog.com
- Debian Security Advisory DLA-4838 vom 2026-10-16 lists.debian.org
- Fedora Security Advisory FEDORA-EPEL-2026-61E356351B vom 2026-10-18 bodhi.fedoraproject.org
- Fedora Security Advisory FEDORA-2026-AAB47C4E08 vom 2026-10-18 bodhi.fedoraproject.org
- Fedora Security Advisory FEDORA-EPEL-2026-8F19F5CC9D vom 2026-10-18 bodhi.fedoraproject.org
- Fedora Security Advisory FEDORA-2026-63615CD446 vom 2026-10-18 bodhi.fedoraproject.org
- Fedora Security Advisory FEDORA-2026-5A871D2CA7 vom 2026-10-18 bodhi.fedoraproject.org
- Fedora Security Advisory FEDORA-EPEL-2026-22F5631881 vom 2026-10-18 bodhi.fedoraproject.org
- openSUSE Security Update OPENSUSE-SU-2026:0349-1 vom 2026-10-16 lists.opensuse.org
- Fedora Security Advisory FEDORA-EPEL-2026-A7DA7E1FAC vom 2026-10-18 bodhi.fedoraproject.org
- openSUSE Security Update OPENSUSE-SU-2026:22118-1 vom 2026-10-18 lists.opensuse.org
- openSUSE Security Update OPENSUSE-SU-2026:22124-1 vom 2026-10-18 lists.opensuse.org
- Release notes for Microsoft Edge Security Updates vom 2026-10-18 learn.microsoft.com
- openSUSE Security Update OPENSUSE-SU-2026:0352-1 vom 2026-10-21 lists.opensuse.org
- Debian Security Advisory DSA-6577 vom 2026-10-22 security-tracker.debian.org
- Debian Security Advisory DLA-4853 vom 2026-10-23 lists.debian.org
CVE: CVE-2026-110144, CVE-2026-110151, CVE-2026-110159, CVE-2026-110166, CVE-2026-110172, CVE-2026-110913, CVE-2026-110914, CVE-2026-110915, CVE-2026-110916, CVE-2026-110917, CVE-2026-110918, CVE-2026-110919, CVE-2026-110920, CVE-2026-110921, CVE-2026-110922
Source: BSI warning and information service (CERT-Bund); CISA. The assessment of the conditions is my reading of the BSI text; the external pages are in their original language.