CVE-2026-2441-PoC

CVE-2026-2441 — Chrome CSSFontFeatureValuesMap Use-After-Free CVSS 8.8（高） | 実際に悪用が確認されている | レンダラーRCE（サンドボックス内） Google ChromeのBlink CSSエンジンにおけるuse-after-free脆弱性です。リモートの攻撃者が、細工されたHTMLページを介してブラウザのサンドボックス内で任意のコードを実行できる可能性があります。 脆弱性の詳細 フィールド| 値 ---|--- CVE| CVE-2026-2441 CVSS| 8.8（高） タイプ|...

CVE-2026-2441-PoC

CVE-2026-2441 — Chrome CSSFontFeatureValuesMap 释放后使用 CVSS 8.8（高危） | 已在野外被积极利用 | 渲染器 RCE（沙箱内） Google Chrome 的 Blink CSS 引擎中存在一个释放后使用漏洞，允许远程攻击者通过精心构造的 HTML 页面在浏览器沙箱内执行任意代码。 漏洞详情 字段| 值 ---|--- CVE| CVE-2026-2441 CVSS| 8.8（高危） 类型| 释放后使用（CWE-416） 组件| Blink CSS — CSSFontFeatureValuesMap 源文件|...

Astra Linux – Vulnerability in Chromium

The use of "after free" in Blink in Google Chrome before version 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

[SECURITY] Fedora 43 Update: chromium-152.0.7977.82-1.fc43

Chromium is an open-source web browser, powered by WebKit Blink...

[SECURITY] Fedora 44 Update: chromium-152.0.7977.75-1.fc44

Chromium is an open-source web browser, powered by WebKit Blink...

GHSA-V79C-CCH6-3849 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-84MV-VQ26-WVMX vulnerabilities

Vulnerabilities for packages: chromium...

[SECURITY] Fedora 44 Update: chromium-151.0.7922.173-1.fc44

Chromium is an open-source web browser, powered by WebKit Blink...

[SECURITY] Fedora 44 Update: chromium-151.0.7922.169-1.fc44

Chromium is an open-source web browser, powered by WebKit Blink...

openSUSE 16 Security Update : chromium (openSUSE-SU-2026:21581-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21581-1 advisory. Changes in chromium: - Chromium 151.0.7922.137 boo1274759: CVE-2026-19556: Use after free in V8 CVE-2026-19557: Use after free in TabStrip...

Chromium: CVE-2026-19560 Use after free in Blink

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

KLA91222 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in V8 can be exploite...

SUSE CVE-2026-19560

Use after free in Blink in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-56987

Use after free in Blink in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

Linux Distros Unpatched Vulnerability : CVE-2026-19560

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Blink in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...

CVE-2026-19560

Use after free in Blink in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-19560

Use after free in Blink in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-19560

A use after free vulnerability exists in the Blink engine of Google Chrome prior to version 151.0.7922.137 . This flaw allows a remote attacker to execute arbitrary code inside a sandbox by hosting a crafted HTML page. The vulnerability also impacts Opera (earlier than 135.0.5973.41) and Microsof...

CVE-2026-19560

Use after free in Blink in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-19560

Use after free in Blink in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...