brash

Brash Chromium Browser DoS Attack via document.title Exploitation Brash is a critical vulnerability in Blink , the rendering engine that powers Google's Chromium-based browsers. It allows any Chromium browser to collapse in 15-60 seconds by exploiting an architectural flaw in how certain DOM...

Blink Router - Command Injection

Blink routers BL-WR9000 V2.4.9 , BL-AC2100AZ3 V1.0.4, BL-X10AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200AT1 v1.0.0, BL-X26AC8 v1.2.8, BLAC450MAE4 v4.0.0 and BL-X26DA3 v1.2.7 were discovered to contain a command injection vulnerability via the bsSetSSIDHide function. id: CVE-2025-45985 info: name: Blin...

CVE-2026-2441-PoC

CVE-2026-2441-PoC CVE-2026-2441 PoC Chrome CSS Use-After-Free PoC（Blink CSSFontFeatureValuesMap） CSS処理でUAFをトリガーするPoC → Chrome =144.0.x（全プラットフォーム）のサンドボックス内でレンダラーRCEを実現。 トリガー: @font-feature-values + container-query + rAFループ内のoffsetWidthによる強制レイアウト再計算 → イテレータの無効化により、参照中にもかかわらずCSSValueが解放される。 チェーン概要:...

CVE-2026-2441-PoC

CVE-2026-2441 — Chrome CSSFontFeatureValuesMap Use-After-Free CVSS 8.8（高） | 実際に悪用が確認されている | レンダラーRCE（サンドボックス内） Google ChromeのBlink CSSエンジンにおけるuse-after-free脆弱性です。リモートの攻撃者が、細工されたHTMLページを介してブラウザのサンドボックス内で任意のコードを実行できる可能性があります。 脆弱性の詳細 フィールド| 値 ---|--- CVE| CVE-2026-2441 CVSS| 8.8（高） タイプ|...

CVE-2026-2441-PoC

CVE-2026-2441 — Chrome CSSFontFeatureValuesMap 释放后使用 CVSS 8.8（高危） | 已在野外被积极利用 | 渲染器 RCE（沙箱内） Google Chrome 的 Blink CSS 引擎中存在一个释放后使用漏洞，允许远程攻击者通过精心构造的 HTML 页面在浏览器沙箱内执行任意代码。 漏洞详情 字段| 值 ---|--- CVE| CVE-2026-2441 CVSS| 8.8（高危） 类型| 释放后使用（CWE-416） 组件| Blink CSS — CSSFontFeatureValuesMap 源文件|...

CVE-2026-2441

CVE-2026-2441 — Chrome CSSFontFeatureValuesMap Use-After-Free CVSS 8.8 High | 야생에서 적극적으로 악용됨 | Renderer RCE Sandboxed Google Chrome의 Blink CSS 엔진에서 발견된 use-after-free 취약점으로, 원격 공격자가 조작된 HTML 페이지를 통해 브라우저 샌드박스 내부에서 임의 코드를 실행할 수 있습니다. 취약점 세부 정보 필드| 값 ---|--- CVE| CVE-2026-2441 CVSS| 8.8 High 유형|...

ROS-20260915-73-0107

The vulnerability of the Blink component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability allows an attacker to compromise data integrity through a specially created HTML page...

ROS-20260915-73-0020

The vulnerability of the Blink component in Google Chrome and Microsoft Edge relates to errors in HTTP request processing. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

ROS-20260915-73-0015

The vulnerability of the Blink component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

ROS-20260915-73-0171

The vulnerability of the Blink component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

Astra Linux – Vulnerability in Chromium

The use of "after free" in Blink in Google Chrome before version 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

Before version 90.0.4430.72, using Blink with Google Chrome on OS X allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

Before version 89.0.4389.90, using Blink with a "after free" mechanism allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

Chromium: CVE-2021-30606 – Use after free in Blink...

Astra Linux – Vulnerability in Chromium

The use of after-free in Blink in Google Chrome before version 149.0.7827.53 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

A heap buffer overflow in Blink in Google Chrome prior to version 94.0.4606.81 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

Using "after free" in Blink in Google Chrome before version 90.0.4430.72 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

Chromium: CVE-2021-30617 – Policy bypass in Blink...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Blink in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Using "after free" in Blink in Google Chrome before version 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...