Linux Distros Unpatched Vulnerability : CVE-2026-4463

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap buffer overflow in WebRTC in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-3916

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds read in Web Speech in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML...

CVE-2026-3916

Out of bounds read in Web Speech in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-3916

CVE-2026-3916 concerns an out-of-bounds read in Web Speech affecting Google Chrome/Chromium. Connected feeds show fixes tied to Chromium 146.0.7680.71 (e.g., chromium-146.0.7680.71-1.fc42/43, Debian DSA-6164-1 notes 146.0.7680.71 fixes). Affected component: Web Speech parsing/access path in Chrom...

CVE-2026-3916

Out of bounds read in Web Speech in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

New Clickfix variant ‘CrashFix’ deploying Python Remote Access Trojan

In January 2026, Microsoft Defender Experts identified a new evolution in the ongoing ClickFix campaign. This updated tactic deliberately crashes victims’ browsers and then attempts to lure users into executing malicious commands under the pretext of restoring normal functionality. This variant...

New Clickfix variant ‘CrashFix’ deploying Python Remote Access Trojan

In January 2026, Microsoft Defender Experts identified a new evolution in the ongoing ClickFix campaign. This updated tactic deliberately crashes victims’ browsers and then attempts to lure users into executing malicious commands under the pretext of restoring normal functionality. This variant...

$6,000 “Stanley” Toolkit Sold on Russian Forums Fakes Secure URLs in Chrome

Say hello to Stanley, a new malicious toolkit that guarantees bypassing Google’s Chrome Web Store review process...

The vulnerability of Google Chrome’s web service allows a hacker to circumvent existing security restrictions.

The vulnerability of Google Chrome’s web service is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to bypass existing security restrictions remotely...

EUVD-2025-200316

Inappropriate implementation in Downloads in Google Chrome on Windows prior to 143.0.7499.41 allowed a local attacker to bypass mark of the web via a crafted HTML page. Chromium security severity: Medium...

Google Chrome < 62.0.3202.75 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 62.0.3202.75. It is, therefore, affected by multiple vulnerabilities as referenced in the 201710stable-channel-update-for-desktop26 advisory. - A stack buffer overflow in V8 in Google Chrome prior to 62.0.3202.75 allowed ...

EUVD-2013-6448

Malware in sbrugna...

EUVD-2013-0896

Malware in sbrugna...

EUVD-2014-1776

Malware in sbrugna...

EUVD-2023-28495

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2011-3889

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer overflow in the Web Audio implementation in Google Chrome before 15.0.874.102 allows remote attackers to cause a denial of service or possibly...

Linux Distros Unpatched Vulnerability : CVE-2018-6054

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in WebUI in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension...

Linux Distros Unpatched Vulnerability : CVE-2020-16044

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted SCTP packet...

Google Chrome Code Execution Vulnerability (CNVD-2025-10928)

Google Chrome is a web browser from Google, an American company. Google Chrome has a code execution vulnerability that can be exploited by attackers to cause heap corruption...

Researchers Expose New Polymorphic Attack That Clones Browser Extensions to Steal Credentials

Cybersecurity researchers have demonstrated a novel technique that allows a malicious web browser extension to impersonate any installed add-on. "The polymorphic extensions create a pixel perfect replica of the target's icon, HTML popup, workflows and even temporarily disables the legitimate...