11521 matches found
EUVD-2026-82490
UI misrepresentation in WebAppInstalls in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Low...
CVE-2026-93386
CVE-2026-93386 affects the WebAppInstalls component of Google Chrome prior to version 153.0.8010.52 . The vulnerability is a UI misrepresentation that allows a remote attacker, leveraging social engineering , to spoof UI elements via a crafted HTML page. The Chromium security severity is rated Lo...
EUVD-2026-82489
Information leak in Paint in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-93383
CVE-2026-93383 is an information leak in the Permissions component of Google Chrome prior to version 153.0.8010.52 . A remote attacker can exploit this by serving a crafted HTML page to leak cross-origin data from a victim's browser. Chromium classifies the security severity as Medium . No exploi...
EUVD-2026-82486
Information leak in Permissions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-93379
CVE-2026-93379 is an incorrect authorization flaw in ORB (Origin/Request Bounding) in Google Chrome prior to 153.0.8010.52 . A remote attacker can leverage a crafted HTML page to bypass site isolation , a key Chrome security boundary that limits cross-origin interactions. Chromium assigns this a ...
CVE-2026-93382
CVE-2026-93382 is a use-after-free vulnerability in PDFium , the PDF rendering engine used by Google Chrome prior to version 153.0.8010.52 . A remote attacker can exploit it via a crafted HTML page to execute arbitrary code inside the Chrome sandbox . Chromium rates the severity as High . The fix...
CVE-2026-91722
A flaw was found in Google Chrome. This 'use after free' vulnerability occurs when the program attempts to use memory that has been deallocated, leading to unpredictable behavior. A remote attacker could exploit this by tricking a user into visiting a specially crafted HTML page. Successful...
CVE-2021-30573
CVE 2021-30573 Google Chrome の脆弱性 CVE-2021-30573 Google Chrome の Use-After-Free により、リモートの攻撃者が細工した HTML ページを介してヒープ破壊を悪用する可能性がありました。 CVE-2021-30573 詳細 脆弱なバージョン : このバグは Google Chrome 91 以前で発生します。92+ 92.0.4515.107 で修正されています。 使用方法: 古い Chrome で exploit.html を実行するだけです。 参考...
CVE-2020-6418
CVE-2020-6418 CVE 2020-6418は、Google ChromeのV8における型混乱に関する脆弱性です。影響を受けるバージョンは80.0.3987.122より前です。この脆弱性は、リモートの攻撃者が細工されたHTMLページを介してターゲットデバイスのシェルにアクセスすることで達成されます。 環境要件 1. バージョン80.0.3987.122より前のGoogle Chrome。 root@kitploit: Note : The Google chrome browser should run with no sandbox for the exploit to be...
CVE-2026-91721
Use after free in Internals in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...
CVE-2026-91725
A flaw was found in Chromium. A remote attacker could exploit an observable discrepancy in CSS by crafting a malicious HTML page. This vulnerability allows the attacker to leak sensitive information from the user's browser...
CVE-2026-91728
A flaw was found in V8, the JavaScript engine used in Google Chrome. An integer overflow vulnerability allows a remote attacker to execute arbitrary code within the browser's security sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page...
DEBIAN-CVE-2026-91746
Integer overflow in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...
DEBIAN-CVE-2026-91745
Use after free in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
DEBIAN-CVE-2026-91743
Race condition in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-91746
Integer overflow in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...
DEBIAN-CVE-2026-91736
Use after free in DOM in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
DEBIAN-CVE-2026-91737
Use after free in PDF in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
DEBIAN-CVE-2026-91728
Integer overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...