PoC-in-GitHub

PoC in GitHub 2026 CVE-2026-0009 2026-06-01 In multiple locations, there is a possible tapjacking due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-87453

A flaw was found in chromium-browser's BackgroundFetch component. A remote attacker, who has already compromised the renderer process, could exploit a confused deputy vulnerability by using a specially crafted HTML page. This could lead to the disclosure of sensitive information...

CVE-2026-87502

A flaw was found in Google Chrome. This confused deputy vulnerability in the Fullscreen feature allows a remote attacker, who has compromised the renderer process and leveraged social engineering, to spoof user interface UI elements. This can be achieved by presenting a specially crafted HTML pag...

CVE-2026-87582

A flaw was found in Google Chrome's DataTransfer component. This confused deputy vulnerability allows a remote attacker, who has already compromised the renderer process, to potentially execute arbitrary code outside the browser's security sandbox. This exploitation occurs through a specially...

EUVD-2026-74449

Confused deputy in Fullscreen in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87502

CVE-2026-87502 is a confused deputy vulnerability in the Fullscreen feature of Google Chrome prior to 153.0.8010.36 . A remote attacker who had already compromised the renderer process could leverage social engineering to spoof UI elements via a crafted HTML page. The Chromium security severity i...

CVE-2026-87582

A confused deputy flaw in the DataTransfer component of Google Chrome prior to version 153.0.8010.36 could allow a remote attacker who has already compromised the renderer process to execute arbitrary code outside the sandbox by serving a crafted HTML page. Chromium rates the security severity as...

EUVD-2026-74327

Confused deputy in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-74316

Confused deputy in Prerender in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87442

CVE-2026-87442 is a confused deputy vulnerability in the Prerender component of Google Chrome , affecting versions prior to 153.0.8010.36 . A remote attacker who had already compromised the renderer process could leverage a crafted HTML page to potentially bypass the web origin policy . The vulne...

CVE-2026-87453

CVE-2026-87453 is a confused deputy vulnerability in BackgroundFetch in Google Chrome prior to 153.0.8010.36 . A remote attacker who had already compromised the renderer process could leak sensitive information by serving a crafted HTML page. Chromium rates the severity as Medium . The fix is ava...

EUVD-2026-74535

Confused deputy in BackgroundFetch in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

PT-2026-88553

Confused deputy in BackgroundFetch in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

PT-2026-88602

Confused deputy in Fullscreen in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

PT-2026-88682

Confused deputy in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

PT-2026-88542

Confused deputy in Prerender in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-73999

In onAttach of BiometricsSettingsBase.java, there is a possible authentication bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-45520

CVE-2026-45520 is a vulnerability in the onAttach method of BiometricsSettingsBase.java within the Android platform. The root cause is a confused deputy flaw that enables an authentication bypass , resulting in local escalation of privilege with no additional execution privileges required and no ...

EUVD-2026-73998

In screenArgsForPermissionCheckIfAny of multiple locations there is a possible risk of unauthorized access due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-45519

CVE-2026-45519 affects Android , specifically the function screenArgsForPermissionCheckIfAny in multiple locations. The root cause is a confused deputy flaw, which could lead to local information disclosure . No additional execution privileges are required, and no user interaction is needed for e...