80124 matches found
CVE-2026-93374
Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...
CVE-2026-93384
CVE-2026-93384 is a server-side request forgery (SSRF) in the Omnibox component of Google Chrome on Android , affecting versions prior to 153.0.8010.52 . A remote attacker leveraging social engineering can exploit crafted network traffic to bypass system access restrictions . The vulnerability is...
CVE-2026-93384
Server-side request forgery in Omnibox in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. Chromium security severity: Medium...
EUVD-2026-82485
Server-side request forgery in Omnibox in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. Chromium security severity: Medium...
CVE-2026-93384
Server-side request forgery in Omnibox in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. Chromium security severity: Medium...
CVE-2026-93372
CVE-2026-93372 is a buffer overflow in WebGL affecting Google Chrome on Android prior to version 153.0.8010.52 . A remote attacker can execute arbitrary code outside the sandbox by serving a crafted HTML page. Chromium rates the severity as Critical . CISA SSVC assesses exploitation as none obser...
EUVD-2026-82476
Buffer overflow in WebGL in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...
CVE-2026-93372
Buffer overflow in WebGL in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...
CVE-2026-93372
Buffer overflow in WebGL in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...
CVE-2026-93372
Buffer overflow in WebGL in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...
CVE-2026-93374
Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...
CVE-2026-93374
CVE-2026-93374 is a use after free vulnerability in Dawn , a graphics library used by Google Chrome on Android , affecting versions prior to 153.0.8010.52 . A remote attacker can potentially execute arbitrary code outside the sandbox by serving a crafted HTML page. Chromium rates the severity as ...
CVE-2026-93374
Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...
EUVD-2026-82475
Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...
CVE-2026-93374
Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...
LazyDroid
Lazydroid 0.4 por Dani Martinez @dan1t0 Lazydroid es una herramienta escrita como un script bash para facilitar algunos aspectos de una evaluación de Android. Proporciona algunas tareas comunes como: Establecer el indicador de depuración debug de una aplicación a true Establecer el indicador de...
test_avb_key
Sobre casi firmar builds de Android Introducción Un error que a veces encuentran los consultores de NCC Group es firmar builds de Android con claves privadas conocidas. Esto deja a los fabricantes de dispositivos y, por lo tanto, a sus usuarios vulnerables, incluso en dispositivos donde el arranq...
JXL_Infotainment_CVE-2025-69515
CVE-2025-69515 Nombre del Ataque 📂 Detalles Adicionales Producto afectado Componentes afectados Módulo receptor GNSS / Chipset GPS Módulo de navegación del infoentretenimiento Framework de servicios de ubicación Vector de ataque La unidad de infoentretenimiento puede ser atacada mediante la...
Remote-buffer-overflow-over-wifi_stack-in-wpa_supplicant-binary-in-android-11-platform-samsung-a20e
Remote-buffer-overflow-over-wifistack-in-wpasupplicant-binary-in-android-11-platform-samsung-a20e Remote buffer overflow over wifistack in wpasupplicant binary in android 11, platform:samsung a20e, stock options so like works out of the box...
EUVD-2026-82424
FairEmail is a fully featured, open source, privacy-friendly email app for Android. Prior to 1.2319, the ActivityAMP AMP message renderer in app/src/main/java/eu/faircode/email/ActivityAMP.java enables JavaScript in its WebView but incompletely sanitizes untrusted message HTML. For non-allowliste...