Skip to content

CVE-2026-11196 on CTRL-OS 26.05

Aliases: CVE-2026-11196

Packages: libxslt

Status: Acknowledged

Advisory Information

Type Confusion in XML in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted XML file. (Chromium security severity: Medium)

Updates

2026-07-15 22:06 CEST

Metadata changes:

  • Status for package libxslt: “Acknowledged”

2026-07-15 19:28 CEST

Metadata changes:

  • Status for package libxslt: “New”

Comment:

The CVE, while being filed against Chromium, is for their bundled libxslt.

  • https://gitlab.gnome.org/GNOME/libxslt/-/work_items/171
  • https://github.com/chromium/chromium/commit/f022d55a424e6b5727681af0002b9e185b3b808b
  • https://chromium.googlesource.com/chromium/src/+/f022d55a424e6b5727681af0002b9e185b3b808b%5E%21/

(Amended on: 2026-07-15 19:36 CEST)