80101 matches found
CVE-2026-93372
Buffer overflow in WebGL in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...
CVE-2026-93374
Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...
CVE-2026-93384
CVE-2026-93384 is a server-side request forgery (SSRF) in the Omnibox component of Google Chrome on Android , affecting versions prior to 153.0.8010.52 . A remote attacker leveraging social engineering can exploit crafted network traffic to bypass system access restrictions . The vulnerability is...
CVE-2026-93384
Server-side request forgery in Omnibox in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. Chromium security severity: Medium...
EUVD-2026-82485
Server-side request forgery in Omnibox in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. Chromium security severity: Medium...
CVE-2026-93384
Server-side request forgery in Omnibox in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. Chromium security severity: Medium...
CVE-2026-93372
CVE-2026-93372 is a buffer overflow in WebGL affecting Google Chrome on Android prior to version 153.0.8010.52 . A remote attacker can execute arbitrary code outside the sandbox by serving a crafted HTML page. Chromium rates the severity as Critical . CISA SSVC assesses exploitation as none obser...
EUVD-2026-82476
Buffer overflow in WebGL in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...
CVE-2026-93372
Buffer overflow in WebGL in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...
CVE-2026-93372
Buffer overflow in WebGL in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...
CVE-2026-93372
Buffer overflow in WebGL in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...
CVE-2026-93374
CVE-2026-93374 is a use after free vulnerability in Dawn , a graphics library used by Google Chrome on Android , affecting versions prior to 153.0.8010.52 . A remote attacker can potentially execute arbitrary code outside the sandbox by serving a crafted HTML page. Chromium rates the severity as ...
CVE-2026-93374
Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...
CVE-2026-93374
Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...
EUVD-2026-82475
Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...
CVE-2026-93374
Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...
LazyDroid
Lazydroid 0.4 por Dani Martinez @dan1t0 Lazydroid es una herramienta escrita como un script bash para facilitar algunos aspectos de una evaluación de Android. Proporciona algunas tareas comunes como: Establecer el indicador de depuración debug de una aplicación a true Establecer el indicador de...
test_avb_key
Sobre casi firmar builds de Android Introducción Un error que a veces encuentran los consultores de NCC Group es firmar builds de Android con claves privadas conocidas. Esto deja a los fabricantes de dispositivos y, por lo tanto, a sus usuarios vulnerables, incluso en dispositivos donde el arranq...
JXL_Infotainment_CVE-2025-69515
CVE-2025-69515 攻击名称 📂 附加详情 受影响产品 受影响组件 GNSS接收器模块 / GPS芯片组 信息娱乐导航模块 位置服务框架 攻击向量 信息娱乐单元可能通过使用SDR设备广播虚假GPS信号成为攻击目标。由于GNSS输入路径缺乏完整性验证，系统可能接受从附近传输的更强虚假信号，从而无需物理接触即可远程操纵位置。 CVSS评分：5.4 AV:A（邻近）：攻击者必须处于射频附近才能广播虚假GPS信号 AC:L（低）：除信号传输外无复杂条件 PR:N（无）：无需认证 UI:N（无）：无需用户交互 S:U（不变）：影响仅限于信息娱乐系统 C:N（无）：无数据机密性影响...
Remote-buffer-overflow-over-wifi_stack-in-wpa_supplicant-binary-in-android-11-platform-samsung-a20e
Desbordamiento-de-búfer-remoto-sobre-wifistack-en-el-binario-wpasupplicant-en-android-11-plataforma-samsung-a20e Desbordamiento de búfer remoto sobre wifistack en el binario wpasupplicant en android 11, plataforma:samsung a20e, opciones de fábrica, por lo que funciona tal cual...