7944 matches found
Firefox-ANGLE-CVE-2024-0741
Fixed in Firefox 123. Fix: https://source.chromium.org/chromium//chromium/angle/angle/+/f8fae1ff4fae14fc6ba0aa1dc3af2e13a6e9a597. Cherry-pick: https://github.com/mozilla/angle/commit/ddaf44ac75d5d0390873c2af193e02159ecbe672...
CVE-2022-22629
CVE-2022-22629 Proof of concept This post is about the poc for the WebGL bug that was patched in Safari 15.4 security updates. If you want to learn in detail about how WebGL works, you can use this official resource since we are going to discuss bug specific details here :...
WebKit-UAF-ANGLE-OOB-Analysis
WebKit-UAF-ANGLE-OOB-Analysis CVE-2025-43529, CVE-2025-14174 Notes and PoC material for a WebKit/ANGLE chain on iOS 26.1. This is not a full exploit; it separates verified primitives from the pieces that still fail. Author: zeroxjf Based on: jir4vv1t's CVE-2025-43529 exploit Status: Partial chain...
CVE-2026-126903
Improper state validation in ANGLE in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: High...
CVE-2026-126870
Uninitialized resource in ANGLE in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-126858
Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-126842
Use after free in ANGLE in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-9999-exploit
CVE-2026-9999 — Chrome ANGLE/Metal WebGL PoC Hunting Harness macOS 1. Vulnerability summary Field| Value ---|--- CVE| CVE-2026-9999 Vendor / product| Google Chrome Affected| Chrome 148.0.7778.216, macOS only 1 Fixed in| 148.0.7778.216 1 Impact| Arbitrary code execution inside a sandbox via a...
CTT-Apple-Silicon-Refraction
CTT-Apple-Silicon-Refraction webkitrefraction.js The 33-Layer WebGL Payload This JavaScript payload uses the \alpha constant to create a high-frequency "Memory Shiver." It induces the Use-After-Free UAF in CVE-2025-43529 by desynchronizing the WebKit garbage collector from the GPU's Metal comman...
chromium-browser: angle: Use after free in ANGLE
An use after free flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/571059182...
chromium-browser: angle: Buffer overflow in ANGLE
A buffer overflow flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/574752676...
chromium-browser: angle: Out of bounds read in ANGLE
An out of bounds read flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/566398391...
chromium-browser: angle: Race condition in ANGLE
A race condition flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/566683383...
Important: Red Hat Security Advisory: webkit2gtk3 security, bug fix, and enhancement update
An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...
EUVD-2026-124079
Improper state validation in ANGLE in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: High...
EUVD-2026-124096
Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...
EUVD-2026-124070
Uninitialized resource in ANGLE in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...
EUVD-2026-124081
Use after free in ANGLE in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
