40 matches found
CVE-2026-113162
A flaw was found in chromium-browser. Due to improper input validation in the Actor component, a remote attacker can potentially execute arbitrary code within the browser's restricted sandbox environment by convincing a user to view a specially crafted HTML page...
Google Chrome buffer error vulnerability
Google Chrome versions prior to 156.0.8078.47 have a buffer error vulnerability. This vulnerability stems from memory corruption in the Actor component, which could allow remote attackers to execute arbitrary code within the sandbox through a specially crafted HTML page...
Google Chrome input validation error vulnerability
Google Chrome versions prior to 156.0.8078.47 contain an input validation error vulnerability. This vulnerability stems from improper input validation in the Actor component, potentially allowing remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...
Astra Linux – Vulnerability in Chromium
The use of after-free in the Actor component in Google Chrome before version 149.0.7827.53 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: High...
Astra Linux – vulnerability in Chromium
After free in the Actor in Google Chrome prior to version 150.0.7871.115, a remote attacker could execute arbitrary code within a sandbox by using a specially crafted HTML page. Chromium security severity: High...
Actor Component Protected Information Access
The vulnerability in the Actor component of Google Chrome and Microsoft Edge web browsers is related to improper authorization. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...
CVE-2026-79090
A flaw was found in chromium-browser. Improper privilege management in the Actor component allows a remote attacker to bypass system access restrictions. This can be achieved by leveraging social engineering techniques through a specially crafted HTML page...
Astra Linux – Vulnerability in Chromium
Insufficient validation of untrusted input in the Actor component of Google Chrome before version 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data through a crafted HTML page. Chromium security severity: High...
ROS-20260915-73-0030
The vulnerability of the Actor component in Google Chrome and Microsoft Edge is related to the implementation of security features at the client side. Exploiting this vulnerability allows a malicious actor to cause service interruptions through a specially created HTML page...
ROS-20260911-73-0113
The vulnerability of the Actor component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...
ROS-20260911-73-0204
The vulnerability of the Actor component in Google Chrome and Microsoft Edge is related to the implementation of security features at the client side. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...
ROS-20260911-73-0066
The vulnerability of the Actor component in Google Chrome and Microsoft Edge is related to the implementation of security features at the client side. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...
CVE-2026-87443
A missing authorization flaw was found in the Actor component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=502768228...
DEBIAN-CVE-2026-87443
Missing authorization in Actor in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87443
Missing authorization in Actor in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87443
Google Chrome and other Chromium-based browsers (such as Microsoft Edge) are vulnerable to missing authorization in the Actor component. A remote attacker can exploit this flaw by hosting a crafted HTML page to obtain sensitive information . Affected versions of Chromium include those prior to 15...
CVE-2026-87443
Missing authorization in Actor in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
ROS-20260909-73-0100
The vulnerability of the Actor component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...
Linux Distros Unpatched Vulnerability : CVE-2026-87443
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Actor in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromi...
CVE-2026-84331
Incorrect authorization in Actor in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...