Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.6

qt6-qtwebengine can cause Chrome crash or takeover

published 4 days ago
Summary

The qt6-qtwebengine component used by Google Chrome before version 124 may mishandle memory, potentially leading to crashes or unwanted code execution. This can affect the stability and security of browsers that rely on this package. Upgrade Chrome to version 124 or later and update the qt6-qtwebengine package to the latest release to resolve the issue.

What to do
  • Update cleanstart qt6-qtwebengine to version 6.6.3-r4.
Affected software
Ecosystem VendorProductAffected versions
CleanStart cleanstart qt6-qtwebengine < 6.6.3-r4
Fix: upgrade to 6.6.3-r4
Original advisory text
Use after free in Visuals in Google Chrome prior to 124
Security vulnerability affects the qt6-qtwebengine package. Use after free in Visuals in Google Chrome prior to 124.
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
9.6 Critical
Timeline
Published31 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
Track software like this
Free during beta