Loading story…
Google Chrome 79.0.3945.79 corrected 51 security issues, including critical Bluetooth and Password Manager bugs and several SQLite Full-Text Search (FTS3/FTS4) defects. The SQLite fixes address crafted-data handling failures such as an out-of-bounds write in CVE-2019-13734 and out-of-bounds reads in CVE-2019-13752 and CVE-2019-13753; the latter affects fts3IncrmergePush and depends on the CVE-2019-13752 correction. Chromium backported upstream changes that improve shadow-table corruption validation, prevent infinite recursion, and remove unsafe reachable FTS3 logic.
Red Hat shipped the Chromium fixes for RHEL 6 Supplementary in RHSA-2019:4238, updating chromium-browser to 79.0.3945.79-1.el6_10; affected users must restart Chromium after installation. CVE-2019-13752 could allow a remote attacker to induce interaction with a crafted HTML page and potentially disclose process-memory contents. Red Hat subsequently included SQLite fixes in RHSA-2020:1810 for RHEL 8 through sqlite-3.26.0-6.el8; RHEL 5 and 6 standalone SQLite were not affected, while affected RHEL 7 SQLite was not scheduled for a fix.
See affected versions and whether adversaries are exploiting it.
13 events from the most recent confirmed update back to the earliest known activity.
Red Hat issued important-security advisory RHSA-2020:2014 for RHEL 7.6 product streams, providing SQLite 3.7.17-8.el7_6.1 packages to remediate CVE-2019-13734, an FTS3 shadow-table corruption-detection issue. The update covered RHEL 7.6 EUS, AUS, TUS, SAP, Compute Node, and multiple hardware architectures.
Red Hat issued RHBA-2020:0547 to remediate CVE-2019-13734 in affected Ansible Tower 3.4, 3.5, and 3.7 memcached packages for RHEL 7.
Red Hat issued important-security advisory RHSA-2020:0273 for RHEL 8, updating SQLite to remediate CVE-2019-13734, an FTS3 shadow-table corruption-detection issue. The update applied across supported RHEL 8 architectures and subscription variants.
Red Hat issued important-security advisory RHSA-2020:0229 for RHEL 8.0 Update Services for SAP Solutions, providing SQLite 3.26.0-4.el8_0 packages to remediate CVE-2019-13734. The update covered x86_64 and ppc64le SAP Solutions variants.
Red Hat issued important-security advisory RHSA-2020:0227 for RHEL 7, updating SQLite to version 3.7.17-8.el7_7.1 and remediating CVE-2019-13734, an FTS3 shadow-table corruption-detection issue. The update covered supported RHEL 7 product variants and x86_64, s390x, ppc64, and ppc64le architectures.
Red Hat's analysis noted that no released standalone SQLite version yet contained the upstream fixes for the FTS3 shadow-table corruption issues underlying CVE-2019-13752, CVE-2019-13753, and CVE-2019-13734.
Red Hat issued critical advisory RHSA-2019:4238 for RHEL 6 Supplementary, updating chromium-browser to 79.0.3945.79-1.el6_10 and remediating 39 CVEs, including the Chromium SQLite flaws.
Pedro Sampaio reported CVE-2019-13734, an out-of-bounds write in Chromium's bundled SQLite component, and CVE-2019-13752, an out-of-bounds read related to FTS3 shadow-table corruption detection.
Sergei Glazunov of Google Project Zero reported CVE-2019-13726, a critical heap-buffer-overflow vulnerability in Chrome Password Manager.
SQLite committed further FTS3 shadow-table corruption-detection improvements, including validation of incremental-merge root-node height and returning FTS_CORRUPT_VTAB for invalid metadata. The change also added debug/test merge-count configurability and updated fuzzing test data.
Gengming Liu and Jianyu Chen of Tencent Keen Security Lab reported CVE-2019-13725, a critical use-after-free vulnerability in Chrome's Bluetooth functionality.
Red Hat issued moderate-severity RHSA-2020:1810 for RHEL 8, providing SQLite 3.26.0-6.el8 and fixing seven vulnerabilities, including CVE-2019-13752 and CVE-2019-13753.
Google released a Chrome update addressing 51 security issues, including critical CVE-2019-13725 in Bluetooth and CVE-2019-13726 in Password Manager, as well as high-severity WebSockets, V8, WebAudio, and SQLite flaws.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
14 references tracked. Mallory keeps watching after this page renders.
access.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceredhat.com
Open sourcechromereleases.googleblog.com
Open sourcegithub.com
Open sourcechromium.googlesource.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Red Hat issued **Important** SQLite updates for RHEL 8, RHEL 9, and RHEL 10 to remediate `CVE-2026-11822` and `CVE-2026-11824` in the FTS5 full-text-search component. Crafted FTS5 data can trigger arbitrary code execution through `CVE-2026-11822`; `CVE-2026-11824` is a heap-based buffer overflow that can lead to arbitrary code execution or a crash. The advisories cover standard and extended-support RHEL deployments, including RHEL 8.4, 8.6, 8.8, and 8.10 channels, across x86_64, aarch64, ppc64le, and s390x where applicable. Organizations should prioritize updating affected SQLite packages through Red Hat package management, including version `3.26.0-21.el8_10` for standard RHEL 8/8.10 ELS, `3.34.1-11.el9_8` for RHEL 9, and `3.46.1-6.el10_2` for RHEL 10, while applying the channel-specific RHEL 8 builds for AUS and EUS deployments. Rocky Linux 8 also released corresponding SQLite updates, and scanners such as Nessus can identify exposed systems through installed-package version checks; these checks do not actively validate exploitability.
Aug 27, 2026
Red Hat released **RHSA-2026:58550** for `webkit2gtk3` on Red Hat Enterprise Linux 9.2 channels, updating the package to `2.52.5-1.el9_2` and addressing a broad set of WebKitGTK vulnerabilities. The patched issues include **CVE-2026-43701**, an Important-severity sandbox escape that could let a malicious website process restricted content outside the sandbox, along with multiple moderate-severity memory-handling flaws such as **CVE-2026-43699**, **CVE-2026-43716**, and **CVE-2026-39872** that can be triggered by crafted web content and lead to unexpected process crashes. Red Hat said fixes were issued across supported RHEL 7, 8, and 9 product streams through related errata, while older RHEL 6 `pywebkitgtk` and `webkitgtk` packages remain out of support scope and should be assumed affected. The advisory also bundles **CVE-2024-4367**, a Mozilla **PDF.js** flaw caused by a missing type check when handling fonts that can enable arbitrary JavaScript execution in the PDF.js context. Red Hat previously rated that issue Important for affected packages including `firefox`, `thunderbird`, `webkitgtk4`, and `webkit2gtk3`, and linked remediation to multiple RHSA updates across standard, EUS, AUS, and SAP-focused RHEL channels. The WebKitGTK fixes were tied to upstream security work that improved memory handling and addressed improper access control, reducing risks ranging from browser process crashes and denial of service to potential memory corruption, information disclosure, and sandbox bypass.
Aug 26, 2026
Red Hat issued Important-rated kernel security updates for multiple Red Hat Enterprise Linux (RHEL) 7 and RHEL 8 support channels. RHSA-2024:1249 updates RHEL 7 to kernel `3.10.0-1160.114.2.el7`, addressing six vulnerabilities including use-after-free flaws in Bluetooth L2CAP, `sch_qfq`, and `nf_tables`; an Intel IGB driver buffer flaw; the `fbcon` console issue tracked as **CVE-2023-38409**; and a `sched/membarrier` flaw. CVE-2023-38409 could leave framebuffer-console mappings pointing to obsolete `fb_info` objects; upstream fixed it in kernel 6.2.12. Additional advisories deliver fixes to specialized RHEL channels: RHSA-2024:0980 updates RHEL 7.6 AUS for Bluetooth, scheduler, and IGB flaws; RHSA-2024:3319 updates RHEL 7.7 AUS for **CVE-2024-1086** in `nf_tables` and Intel Gather Data Sampling (**CVE-2022-40982**); and RHSA-2024:1278 provides a live `kpatch-patch` update for RHEL 8.2 SAP Solutions covering nine kernel vulnerabilities across networking, NVMe, kTLS, and IGB components. Administrators should apply the applicable packages and reboot systems where required; live-patch deployments should follow Red Hat’s kpatch update procedure.
Aug 26, 2026