10894 matches found
CVE-2026-79002
A flaw was found in chromium-browser's SiteIsolation component. This incorrect authorization vulnerability allows a remote attacker, who has already compromised the renderer process, to bypass site isolation by using a specially crafted HTML page. This bypass could lead to further compromise of...
CVE-2026-11645
CVE-2026-11645 - V8 in Google Chrome prima dell'esecuzione remota di codice Utilizzo rapido root@kitploit: python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe Note sullo sfruttamento Gravità: ALTA CVSS: 8.8 Impatto: Riservatezza, Integrità, Disponibilità Pubblicato:...
CVE-2023-4357-Exploitation
CVE-2023-4357-Sfruttamento Progetto di Sicurezza di Rete Descrizione Validazione insufficiente dell'input non fidato in XML in Google Chrome precedente alla versione 116.0.5845.96 ha permesso a un attaccante remoto di bypassare le restrizioni di accesso ai file tramite una pagina HTML manipolata...
CVE-2021-30573
CVE 2021-30573 Vulnerabilità di Google Chrome CVE-2021-30573 Use after free nella GPU di Google Chrome ha permesso a un attaccante remoto di sfruttare potenzialmente la corruzione dell'heap tramite una pagina HTML appositamente predisposta. CVE-2021-30573 Dettaglio Versioni vulnerabili : Il bug...
CVE-2020-6418
CVE-2020-6418 O CVE 2020-6418 trata da confusão de tipos no V8 do Google Chrome. As versões afetadas eram anteriores a 80.0.3987.122. A vulnerabilidade é alcançada por um atacante remoto que acessa o shell de um dispositivo alvo por meio de uma página HTML manipulada. Requisitos de Ambiente 1...
CVE-2026-79240
Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-79235
Use after free in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-79231
Buffer overflow in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79202
Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-79197
Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79125
Information leak in XR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79075
Information leak in Geolocation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79038
Incorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78990
Use after free in Compositing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78980
Improper input validation in ReaderMode in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Low...
CVE-2026-78951
Use after free in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78950
Integer overflow in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-78898
Incorrect authorization in Downloads in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...