Vulnerabilities & Exploits
Chromium Flaws Actively Exploited; Debian Issues Updates Debian released security updates for Chromium fixing two tracked vulnerabilities. Google reports exploits exist in the wild; the flaws can allow code execution, denial of service, or information disclosure. Fixes are in bookworm (146.0.7680.80 -1~deb12u1) and trixie (146.0.7680.80 -1~deb13u1).
1 source · Mar 18
NVD KEV
Known exploited · CISA KEV
CVSS 8.8 HIGH: out of bounds write in Skia in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. EPSS 33% (97th percentile). Microsoft patch: Release Notes.
CISA federal remediation date Mar 27
NVD KEV
Known exploited · CISA KEV
CVSS 8.8 HIGH: inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. EPSS 23% (96th percentile). Microsoft patch: Release Notes.
CISA federal remediation date Mar 27
Timeline Sources Mar 18 Debian Security Advisories
SECURITY] [DSA 6168-1] freetype security update
SECURITY] [DSA 6168-1] freetype security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - Debian Security Advisory DSA-6168-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff March 18, 2026 https://www.debian.org/security/faq - Package : freetype…
original Mar 17 Debian Security Advisories
SECURITY] [DSA 6167-1] gst-plugins-base1.0 security update
SECURITY] [DSA 6167-1] gst-plugins-base1.0 security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - Debian Security Advisory DSA-6167-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff March 17, 2026 https://www.debian.org/security/faq - Package…
original Mar 17 Debian Security Advisories
SECURITY] [DSA 6166-1] nodejs security update
SECURITY] [DSA 6166-1] nodejs security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - Debian Security Advisory DSA-6166-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff March 17, 2026 https://www.debian.org/security/faq - Package : nodejs CVE ID…
original Part of the PlainSec briefing for 2026-03-18
Every edition of this story: Chromium Flaws Actively Exploited; Debian Issues Updates
More from today Vulnerabilities & Exploits
Chromium Flaws Actively Exploited; Debian Issues Updates Debian released security updates for Chromium fixing two tracked vulnerabilities. Google reports exploits exist in the wild; the flaws can allow code execution, denial of service, or information disclosure. Fixes are in bookworm (146.0.7680.80 -1~deb12u1) and trixie (146.0.7680.80 -1~deb13u1).
1 source · Mar 18
NVD KEV
Known exploited · CISA KEV
CVSS 8.8 HIGH: out of bounds write in Skia in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. EPSS 33% (97th percentile). Microsoft patch: Release Notes.
CISA federal remediation date Mar 27
NVD KEV
Known exploited · CISA KEV
CVSS 8.8 HIGH: inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. EPSS 23% (96th percentile). Microsoft patch: Release Notes.
CISA federal remediation date Mar 27
Timeline Sources Mar 18 Debian Security Advisories
SECURITY] [DSA 6168-1] freetype security update
SECURITY] [DSA 6168-1] freetype security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - Debian Security Advisory DSA-6168-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff March 18, 2026 https://www.debian.org/security/faq - Package : freetype…
original Mar 17 Debian Security Advisories
SECURITY] [DSA 6167-1] gst-plugins-base1.0 security update
SECURITY] [DSA 6167-1] gst-plugins-base1.0 security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - Debian Security Advisory DSA-6167-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff March 17, 2026 https://www.debian.org/security/faq - Package…
original Mar 17 Debian Security Advisories
SECURITY] [DSA 6166-1] nodejs security update
SECURITY] [DSA 6166-1] nodejs security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - Debian Security Advisory DSA-6166-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff March 17, 2026 https://www.debian.org/security/faq - Package : nodejs CVE ID…
original Part of the PlainSec briefing for 2026-03-18
Every edition of this story: Chromium Flaws Actively Exploited; Debian Issues Updates
More from today