CVE-2026-15109

EUVD-2026-42481
Uninitialized Use in ANGLE in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 19.35%
Affected Products (NVD)
VendorProductVersion
googlechrome
𝑥
< 150.0.7871.115
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
chromium
bookworm
vulnerable
bookworm (security)
154.0.8037.92-1~deb12u1
fixed
forky
154.0.8037.57-1
fixed
sid
154.0.8037.92-1
fixed
trixie
150.0.7871.181-1~deb13u1
fixed
trixie (security)
154.0.8037.92-1~deb13u1
fixed
webkit2gtk
bookworm
vulnerable
bookworm (security)
vulnerable
forky
vulnerable
sid
vulnerable
trixie
vulnerable
trixie (security)
2.54.0-1~deb13u1
fixed
wpewebkit
bookworm
ignored
forky
2.54.0-2
fixed
sid
2.54.0-2
fixed
trixie
ignored
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
chromium-browser
jammy
not-affected
noble
not-affected
resolute
not-affected
webkitgtk
bionic
ignored
jammy
dne
noble
dne
resolute
dne
xenial
ignored
webkit2gtk
bionic
ignored
focal
ignored
jammy
ignored
noble
deferred
resolute
deferred
xenial
ignored
qtwebkit-source
bionic
ignored
jammy
dne
noble
dne
resolute
dne
xenial
ignored
qtwebkit-opensource-src
bionic
ignored
focal
ignored
jammy
ignored
noble
ignored
resolute
dne
xenial
ignored
wpewebkit
focal
ignored
jammy
ignored
noble
dne
resolute
dne
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
webkit2gtk3
RHEL 8
0:2.54.0-1.el8_10
fixed
RHEL 9
0:2.54.0-1.el9_8
fixed
webkit2gtk3-devel
RHEL 8
0:2.54.0-1.el8_10
fixed
RHEL 9
0:2.54.0-1.el9_8
fixed
webkit2gtk3-jsc
RHEL 8
0:2.54.0-1.el8_10
fixed
RHEL 9
0:2.54.0-1.el9_8
fixed
webkit2gtk3-jsc-devel
RHEL 8
0:2.54.0-1.el8_10
fixed
RHEL 9
0:2.54.0-1.el9_8
fixed