CVE-2026-19557

CVE-2026-19557 is a use-after-free in Chrome’s TabStrip on macOS, allowing a renderer-compromised attacker to potentially escape the sandbox via a crafted HTML page. Affects Google Chrome versions prior to 151.0.7922.137 (Mac; also 151.0.7922.137/138 for Windows/macOS per the Chrome stable update...

CVE-2026-19556

Use after free in V8 in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-19556

CVE-2026-19556 is a use-after-free vulnerability in the V8 JavaScript engine within Google Chrome prior to 151.0.7922.137, allowing a remote attacker to execute arbitrary code inside the browser sandbox when a user visits a crafted HTML page. Multiple sources (NVD, Red Hat, Debian OSV, EUVD) desc...

CVE-2026-19556

Use after free in V8 in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-19556

Use after free in V8 in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-73032

PapersGPT for Zotero 0.6.1 contains a remote code execution vulnerability that allows attackers to execute arbitrary JavaScript by returning malicious code from an LLM endpoint that is passed unsanitized to window.eval in views.ts. Attackers can exploit this through prompt injection in PDFs, MITM...

CVE-2026-62776

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:35+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:16:22+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284 2026-08-12 01:01:32+00:00| seen|...

Duplicate Advisory: Nuxt dev server discloses project root and workspace UUID via the Chrome DevTools workspace endpoint

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-7c4v-fwgw-9rf7. This link is maintained to preserve external references. Original Description Nuxt versions = 4.4.7 and = 3.21.7 and 3.21.10, contain an information disclosure vulnerability in the development...

CVE-2026-19167

A flaw was found in Google Chrome. An integer overflow vulnerability in the Graphics Processing Unit GPU component could allow a remote attacker, who has already compromised the renderer process, to leak sensitive cross-origin data. This exploitation is possible by enticing a user to visit a...

CVE-2026-19139

A flaw was found in Google Chrome's CredentialProvider on Windows. This race condition vulnerability allows a local attacker to execute code with elevated operating system OS privileges. The attacker can achieve this by exploiting the flaw with a specially crafted malicious file, leading to...

CVE-2026-19160

A flaw was found in Skia, a 2D graphics library used in Google Chrome. A remote attacker, after compromising the renderer process, could exploit an uninitialized use vulnerability by crafting a malicious HTML page. This could lead to the disclosure of sensitive cross-origin data...

CVE-2026-19146

A flaw was found in Google Chrome on Android, specifically within its Graphics Processing Unit GPU component. A remote attacker, after compromising the browser's renderer process, could exploit an uninitialized memory vulnerability by tricking a user into visiting a specially crafted HTML page...

CVE-2026-19168

A flaw was found in V8 in Google Chrome. An inappropriate implementation allows a remote attacker to execute arbitrary code within the browser's sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page, leading to unauthorized code execution...

CVE-2026-19174

A flaw was found in V8, the JavaScript engine used in Google Chrome. This integer overflow vulnerability allows a remote attacker to execute arbitrary code within the browser's security sandbox—a protective environment that limits what a program can do. This can occur when a user visits a special...

CVE-2026-19162

A flaw was found in V8, the JavaScript engine used in Google Chrome. This out-of-bounds write vulnerability allows a remote attacker to execute arbitrary code within the browser's sandbox environment. Exploitation occurs when a user visits a specially crafted HTML page. This could lead to...

CVE-2026-19161

A flaw was found in Skia in Google Chrome. This uninitialized use vulnerability allows a remote attacker, who has already compromised the renderer process, to craft a malicious HTML page. Successful exploitation can lead to the leakage of sensitive cross-origin data...

CVE-2026-19154

A flaw was found in Skia, a 2D graphics library used in Google Chrome on Android. A remote attacker, who has already compromised the browser's renderer process, could exploit this use-after-free vulnerability by tricking a user into visiting a specially crafted HTML page. This could potentially...

CVE-2026-19156

A flaw was found in Google Chrome's Base component. An attacker could convince a user to install a malicious extension, leading to a heap buffer overflow. This vulnerability allows for potential heap corruption, which could be exploited to impact the integrity and availability of the browser...

CVE-2026-19150

A flaw was found in V8, the JavaScript engine used in Google Chrome. An inappropriate implementation vulnerability allowed a remote attacker to execute arbitrary code within the browser's sandbox. This could be achieved by enticing a user to visit a specially crafted HTML page. The primary impact...

CVE-2026-19148

A flaw was found in the GPU component of Google Chrome on Linux. A remote attacker, who has already compromised the renderer process, could exploit an out-of-bounds write vulnerability by tricking a user into visiting a specially crafted HTML page. This could potentially allow the attacker to...