CVE-2026-18005

ADVISORY - debian

Summary

Inappropriate implementation in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low)

chromium [bullseye] - chromium (see https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1061268)

Common Weakness Enumeration (CWE)

ADVISORY - redhat

CWE-825⁠

Expired Pointer Dereference

Impacted images

Advisories

Debian

CREATED

4 hours ago

UPDATED

3 hours ago

ADVISORY IDCVE-2026-18005⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Red Hat

CREATED

22 hours ago

UPDATED

2 hours ago

ADVISORY IDCVE-2026-18005⁠

EXPLOITABILITY SCORE

2.8

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-825⁠

CVSS SCORE

4.3low