CVE-2026-91725

A flaw was found in Chromium. A remote attacker could exploit an observable discrepancy in CSS by crafting a malicious HTML page. This vulnerability allows the attacker to leak sensitive information from the user's browser...

CVE-2026-91728

A flaw was found in V8, the JavaScript engine used in Google Chrome. An integer overflow vulnerability allows a remote attacker to execute arbitrary code within the browser's security sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page...

CVE-2026-91746

Integer overflow in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-91709

Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91719

CVE-2026-91719 is a code injection in XML vulnerability in Google Chrome prior to version 153.0.8010.47 . A remote attacker could exploit it via a crafted HTML page to bypass the web origin policy . The vulnerability is rated Low severity by Chromium. The fix is available in Chrome 153.0.8010.47 ...

CVE-2026-91722

CVE-2026-91722 is a use-after-free vulnerability in the Input component of Google Chrome prior to version 153.0.8010.47 . A remote attacker can potentially execute arbitrary code outside the sandbox by serving a crafted HTML page to the user. The vulnerability carries a Medium severity rating per...

CVE-2026-91710

CVE-2026-91710 is a use after free vulnerability in the WebAppInstalls component of Google Chrome , affecting versions prior to 153.0.8010.47 . A remote attacker can execute arbitrary code outside the sandbox by serving a crafted HTML page to a victim. The Chromium security team rates the severit...

CVE-2026-91716

A use-after-free vulnerability in the Auth component of Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox by delivering a crafted HTML page. The Chromium security team rated the severity as High . The issue was fixed in the stable channel...

EUVD-2026-79975

Uninitialized resource in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-91736

Use after free in DOM in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91731

Type confusion in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91728

Integer overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2021-30573

CVE 2021-30573 Vulnerabilidades de Google Chrome CVE-2021-30573 Un use-after-free en GPU en Google Chrome permitía a un atacante remoto explotar potencialmente la corrupción del heap mediante una página HTML manipulada. Detalle de CVE-2021-30573 Versiones vulnerables : El bug funciona en Google...

CVE-2020-6418

CVE-2020-6418 El CVE-2020-6418 trata sobre la confusión de tipos en V8 de Google Chrome. Las versiones afectadas fueron anteriores a 80.0.3987.122. La vulnerabilidad se logra mediante un atacante remoto que accede al shell de un dispositivo objetivo a través de una página HTML manipulada...

CVE-2023-4357-Exploitation

CVE-2023-4357-Exploitation Proyecto de Seguridad de Redes Descripción La validación insuficiente de entradas no confiables en XML en Google Chrome anterior a 116.0.5845.96 permitió que un atacante remoto omitiera las restricciones de acceso a archivos mediante una página HTML manipulada. Reproduc...

Astra Linux – Vulnerability in Chromium

The inappropriate implementation of WebAppInstalls in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass the same-origin policy through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Insufficient data validation in Animation in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Using WebCodecs with “after free” before version 148.0.7778.216 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in the Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Inappropriate implementations of WebAuthentication in Google Chrome prior to version 96.0.4664.45 allowed a remote attacker to leak cross-origin data through a crafted HTML page...