CVE-2026-106401

A flaw was found in the Media component of chromium-browser. An out-of-bounds write vulnerability allows a remote attacker to achieve arbitrary code execution outside the browser sandbox by tricking a user into visiting a specially crafted HTML HyperText Markup Language page. Successful...

CVE-2026-106339

A flaw was found in the Core component of chromium-browser. A remote attacker who has compromised a browser renderer process could exploit a use of released resource condition by enticing a user to visit a crafted HTML page. Successful exploitation allows the attacker to access cross-origin data...

CVE-2026-106392

A flaw was found in chromium-browser's WebAudio component. A remote attacker could exploit this vulnerability by convincing a user to visit a specially crafted HTML page. Successful exploitation can result in information disclosure, potentially allowing the attacker to access sensitive cross-orig...

CVE-2026-106416

A flaw was found in chromium-browser. A remote attacker could use social engineering techniques to trick a user into installing a crafted browser extension, resulting in code injection within the extension framework. This vulnerability allows the attacker to spoof user interface UI elements,...

CVE-2026-106331

A flaw was found in chromium-browser. Improper input validation within the Extensions component allows a remote attacker to bypass web origin security policies. By using social engineering to convince a user to install a crafted browser extension, an attacker can gain unauthorized access to...

CVE-2026-106391

A flaw was found in chromium-browser. An incorrect authorization issue in the WebShare component allows a remote attacker who has compromised the renderer process to spoof user interface UI elements via a crafted HTML HyperText Markup Language page. Successful exploitation enables an attacker to...

CVE-2026-106359

A flaw was found in chromium-browser. A confused deputy vulnerability in the DeviceBoundSessionCredentials feature allows a remote attacker to trick the browser into misusing its authority. By convincing a user to visit a specially crafted HTML page, the attacker can bypass web origin security...

CVE-2026-106301

A flaw was found in the Contextual Tasks component of chromium-browser. This flaw allows a remote attacker who has already compromised the renderer process to bypass access restrictions into privileged browser pages. By convincing a user to open a crafted HTML page, the attacker exploits a confus...

CVE-2026-106297

A flaw was found in chromium-browser. An authorization vulnerability within the scheduling mechanism allows a remote attacker to bypass the web origin policy, a security control that prevents websites from accessing data from other sites. By convincing a user to visit a specially crafted HTML pag...

CVE-2026-106275

A flaw was found in chromium-browser. This flaw allows a remote attacker to cause an information disclosure through an uninitialized resource in the Graphics Processing Unit GPU component. By convincing a user to open a specially crafted HTML page, an attacker can read memory outside the browser'...

CVE-2026-106374

A flaw was found in chromium-browser. A type confusion vulnerability in the V8 JavaScript engine allows a remote attacker to execute arbitrary code inside the browser sandbox by convincing a user to visit a specially crafted HTML page. Successful exploitation compromises the browser process, whic...

CVE-2026-106318

A flaw was found in chromium-browser. A remote attacker could achieve arbitrary code execution within the browser's sandbox environment by tricking a user into visiting a crafted HTML page. This issue is caused by a use-after-free memory flaw in the Media component, where previously released memo...

CVE-2026-106235

A flaw was found in chromium-browser. A use-after-free vulnerability—where memory is accessed after it has been released—exists in the WebAudio component. A remote attacker could exploit this issue by enticing a user to visit a crafted HTML page, potentially leading to arbitrary code execution...

burp-dom-scanner

Burp DOM Scanner It's a Burp Suite's extension to allow for recursive crawling and scanning of Single Page Applications. It runs a Chromium browser to scan the webpage for DOM-based XSS. It can also collect all the requests XHR, fetch, websockets, etc issued during the crawling allowing them to b...

MiracleLinux 8 : webkit2gtk3-2.54.0-1.el8_10.ML.1 (AXSA:2026-1970:09)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1970:09 advisory. chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia CVE-2023-4860 chromium-browser: angle: Out of bounds memory...

CVE-2026-103627

A flaw was found in chromium-browser. This vulnerability can lead to information disclosure due to an issue within the Scalable Vector Graphics SVG implementation. A remote attacker could exploit this flaw by enticing a user to view a specially crafted HTML page, allowing unauthorized access to...

CVE-2026-103629

A flaw was found in the Skia graphics library in chromium-browser. This vulnerability allows for information disclosure through an integer overflow when processing web content. A remote attacker can exploit this flaw by enticing a user to view a specially crafted HTML page, leading to unauthorize...

POC-CVE-2024-6778

CVE-2024-6778 Este repositorio contiene pruebas de concepto proof-of-concept para CVE-2024-6778, que son vulnerabilidades en el navegador web Chromium que permiten una evasión de la sandbox a través de una extensión del navegador. Para ejecutar estos exploits, necesitas una versión de Chromium...

CVE-2026-95328

A flaw was found in chromium-browser. A confused deputy vulnerability—where a legitimate application is manipulated into misusing its authority—allows a local attacker to obtain sensitive information. By leveraging social engineering alongside a co-installed application on the device, an attacker...

CVE-2026-103628

A flaw was found in the WebGL Web Graphics Library component of chromium-browser. An out-of-bounds write vulnerability allows a remote attacker to execute arbitrary code outside the browser sandbox by tricking a user into visiting a specially crafted HTML page. Successful exploitation enables an...