CVE-2026-78898

A flaw was found in Google Chrome's Downloads feature. A remote attacker can exploit this vulnerability by leveraging social engineering techniques with a specially crafted HTML page. This allows the attacker to bypass system access restrictions, potentially leading to unauthorized access or...

CVE-2026-79107

A flaw was found in Google Chrome. Incorrect authorization within the TabGroups feature could allow a remote attacker to exploit this vulnerability. By sending crafted network traffic, an attacker could potentially leak sensitive information from the user's browser...

CVE-2026-79118

A flaw was found in Chromium's ANGLE component. A remote attacker could exploit an uninitialized resource vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to the disclosure of sensitive cross-origin data...

CVE-2026-79075

A flaw was found in Google Chrome. An information leak vulnerability exists in the Geolocation feature, which could allow a remote attacker to obtain sensitive user information. This exploitation occurs when a user is tricked into visiting a specially crafted HTML page, leveraging social...

BloodBash

BloodBash Un progetto open source di SquidSec SquidOffense.com · GitHub BloodBash è un analizzatore JSON offline open source per SharpHound e AzureHound, creato e gestito da SquidSec. Costruisce un grafo, mette in evidenza percorsi di attacco e configurazioni errate di AD/Entra e stampa i risulta...

CVE-2026-79286

A flaw was found in Chromium-browser. Missing authorization in CustomTabs on Android allows a local attacker to potentially execute arbitrary code outside the sandbox. This vulnerability can be exploited via a co-installed application, leading to a compromise of the system beyond its intended...

CVE-2026-79249

A flaw was found in Google Chrome's Bisection component. This code injection vulnerability allows a remote attacker to obtain sensitive information by tricking a user into processing a specially crafted file. This could lead to unauthorized access to confidential data...

CVE-2026-75062

Improper Neutralization of Directives in Dynamically Evaluated Code 'Eval Injection' in the default lf.query Python protocol in Google langfun versions prior to 0.1.2 allows remote unauthenticated attackers to execute arbitrary Python code in the context of the host application via crafted prompt...

CVE-2026-80586

CVE-2026-80586 affects the Linux kernel MPTCP (Multipath TCP) options handling. A remote peer can send a malformed DSS (Data Sequence Number) suboption with an incorrect size , followed by another DSS or MPC + Data. The first suboption is ignored, but some fields remain written , leading to incon...

CVE-2026-79051

A flaw was found in Google Chrome. Incorrect authorization within the Loader component allows a remote attacker to bypass the web origin policy. This can be exploited by enticing a user to visit a specially crafted HTML page...

CVE-2026-79012

A flaw was found in Chromium's Safebrowsing component. A remote attacker could exploit a use-after-free vulnerability by leveraging social engineering to trick a user into visiting a crafted HTML page. This could allow the attacker to execute arbitrary code outside of the browser's security...

CVE-2026-78966

A flaw was found in Google Chrome. An externally controlled reference within the QUIC protocol could allow a remote attacker to bypass the web origin policy. This vulnerability can be exploited by enticing a user to visit a specially crafted HTML page. The bypass of the web origin policy could le...

CVE-2026-78948

A flaw was found in chromium-browser. This buffer overflow vulnerability in WebGL allows a remote attacker to execute arbitrary code outside the sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page, leading to a complete compromise of the affected system...

CVE-2026-78904

A flaw was found in ANGLE. A type confusion vulnerability in ANGLE, a graphics abstraction layer used in Google Chrome, allows a remote attacker to exploit the flaw. By crafting a malicious HTML page, the attacker can trigger this vulnerability. This could potentially lead to the execution of...

CVE-2026-79202

A flaw was found in Chromecast within Google Chrome. A remote attacker could exploit a use-after-free vulnerability by enticing a user to visit a specially crafted HTML page. This could allow the attacker to execute arbitrary code within the browser's sandbox, potentially leading to further syste...

CVE-2026-79205

A flaw was found in Google Chrome. This incorrect authorization vulnerability in the browser's Network component allows a remote attacker to bypass the web origin policy. By enticing a user to open a specially crafted HTML page, an attacker could potentially gain unauthorized access to sensitive...

CVE-2026-79201

A flaw was found in Chromium. Improper access control in the Workers component allows a remote attacker to bypass the web origin policy. This can be achieved by enticing a user to visit a specially crafted HTML page, potentially leading to unauthorized access to sensitive information or actions...

CVE-2026-79187

A flaw was found in chromium-browser. A remote attacker could exploit a use-after-free vulnerability in the WebRTC component by enticing a user to visit a specially crafted HTML page. This could allow the attacker to execute arbitrary code within the browser's sandbox, potentially leading to...

CVE-2026-79180

A flaw was found in Google Chrome. This vulnerability, located in the CustomTabs feature, allows a remote attacker to leverage social engineering. By using a specially crafted HTML page, the attacker can spoof user interface UI elements. This misrepresentation could deceive users, potentially...

CVE-2026-79141

A flaw was found in Google Chrome Browser. This incorrect authorization vulnerability allows a remote attacker to bypass the web origin policy by enticing a user to visit a specially crafted HTML page. This could lead to unauthorized access to sensitive information or actions within the browser...