CVE-2026-13028

A use after free vulnerability exists in the WebGL component of Google Chrome on Android (prior to version 149.0.7827.197 ). This flaw allows a remote attacker to potentially perform a sandbox escape by delivering a crafted HTML page. The vulnerability is classified as Critical by Chromium securi...

bad-epoll

Bad Epoll: The bug missed by Mythos An unprivileged process...

PT-2026-52050

Use after free in WebGL in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

PT-2026-52055

Use after free in WebView in Google Chrome on Android prior to 149.0.7827.197 allowed a local attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-13032: Use After Free

Use after free in WebGL in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

Google Android DDoS Vulnerability (CNVD-2026-26529)

Android is Google's mobile operating system, used for managing the operation of smartphones, tablets, and embedded devices. Google Android has a denial-of-service vulnerability. The vulnerability arises due to a lack of null pointer checking in the checkSsrcCollisionOnRcv function in...

Google Android Buffer Overflow Vulnerability (CNVD-2026-26528)

Google Android is an operating system based on Linux, open-sourced by Google Inc. There is a buffer overflow vulnerability in Google Android. This vulnerability stems from memory corruption in the NrmmMsgCodec::DecodeUPUTransparentContext function found in the cnNrmmDecoder.cpp file. This can lea...

CVE-2026-13028: Use After Free

Use after free in WebGL in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-13037: Use After Free

Use after free in WebView in Google Chrome on Android prior to 149.0.7827.197 allowed a local attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

Google Android Buffer Overflow Vulnerability (CNVD-2026-26526)

Google Android is an operating system based on Linux, open-sourced by Google Inc. Google Android has a buffer overflow vulnerability. This vulnerability stems from the lack of boundary checks in the RtcpHeader::decodeRtcpHeader function, which may lead to out-of-bounds reads, resulting in remote...

Google Android Buffer Overflow Vulnerability (CNVD-2026-25586)

Google Android is an open-source operating system based on Linux, developed by Google Inc. Google Android has a buffer overflow vulnerability. This vulnerability stems from a lack of boundary checks in the TextRtpPayloadDecoderNode::DecodeT140 function found in TextRtpPayloadDecoderNode.cpp. This...

Google Android Out-of-Bounds Write Vulnerability (CNVD-2026-26527)

Google Android is an operating system based on Linux, open-sourced by Google Inc. in the United States. There is a buffer overflow vulnerability in Google Android. The cause of this vulnerability lies in the incorrect boundary checking of the Write function in msgtoHostbuffer.cc; it is possible f...

PT-2026-52048

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 149.0.7827.197 Description An uninitialized use in the GPU component allows a remote attacker to obtain potentially sensitive information from process memory. This is achieved by inducing the victim t...

PT-2026-52046

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 149.0.7827.197 Description A use after free issue exists in WebGL, which could allow a remote attacker to potentially perform a sandbox escape by inducing the user to visit a crafted HTML page. A use...

CVE-2026-13030: Use of Uninitialized Variable

Uninitialized Use in GPU in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

Improper Export of Android Application Components

Overview Affected versions of this package are vulnerable to Improper Export of Android Application Components via the LocationSensorManager BroadcastReceiver process. An attacker can manipulate zone-based automations by sending a forged location result, causing unauthorized actions such as...

CVE-2026-54318

Home Assistant is open source home automation software that puts local control and privacy first. Prior to 2026.5.3, the LocationSensorManager BroadcastReceiver is exported with no permission. Any installed app, with zero runtime permissions, can broadcast a forged Google Play Services...

Exploit for Out-of-bounds Write in Samsung Android

SveService Buffer Overflow portug...

KLA91118 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, obtain sensitive information, cause denial of service. Below is a complete list of vulnerabilities: 1. Race vulnerability in DevTools ca...

The vulnerability of the graphics processor in Google Chrome browsers on Android operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the graphics processor in Google Chrome browsers on Android operating systems is related to the use of uninitialized variables. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created HTML page...