CVE-2026-91746

CVE-2026-91746 is an integer overflow in the Compositing component of Google Chrome, affecting versions prior to 153.0.8010.47 . A remote attacker can exploit this via a crafted HTML page to obtain cross-origin data , bypassing same-origin isolation. Google rated it High severity internally; the ...

CVE-2026-91708

Race condition in Network in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-91740

Uninitialized resource in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-91708

Race condition in Network in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-91708

Race condition in Network in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

EUVD-2026-79975

Uninitialized resource in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-91740

CVE-2026-91740 is an uninitialized resource flaw in Skia , the 2D graphics library used in Google Chrome . A remote attacker could exploit it via a crafted HTML page to obtain cross-origin data , leaking information from other web origins. The vulnerability affects Chrome versions prior to 153.0....

EUVD-2026-79973

Race condition in Network in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-91740

Uninitialized resource in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-91708

A race condition in the Network component of Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had already compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium rates the severity as High . The bug was reported by Google on 2026-08-26 and ...

CVE-2026-91747

Use after free in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

EUVD-2026-79967

Use after free in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-91747

Use after free in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-91747

A use-after-free vulnerability in Skia , the 2D graphics library used by Google Chrome , affects versions prior to 153.0.8010.47 (Windows/Mac) and 153.0.8010.48 (Windows/Mac). The flaw allows a remote attacker who has already compromised the renderer process to obtain cross-origin data by serving...

CVE-2026-2828-WebGPU-Cross-Origin-Pixel-Stealing-via-Timing

4. CVE-2026-2828 – 通过计时实现 WebGPU 跨源像素窃取 概述 恶意网站利用 WebGPU 计算着色器计时来测量跨源 iframe 的渲染时间，从而恢复敏感内容（例如银行信息）的像素值。 严重性： 高（信息泄露） 演示用 HTML/JS（单文件） root@kitploit: CVE-2026-2828 PoC WebGPU Side-Channel Leak The iframe below contains a secret code that we will leak pixel-by-pixel. // This PoC assumes a...

CVE-2026-81925

Concrete CMS before 9.5.3 improperly neutralized a user-supplied custom date format when rendering conversation messages, resulting in reflected cross-site scripting. An attacker could execute arbitrary JavaScript in the browser of a user who was tricked into submitting a crafted POST request to...

Http4s: CookieJar middleware matches by substring, leaking cookies cross-origin

The CookieJar client middleware decides whether to attach a cookie to an outgoing request using an unanchored substring test on the host and path, instead of the domain match specified by RFC6265 5.1.3. A cookie stored for example.com is therefore sent to any host whose name merely contains...

CVE-2026-69215

Http4s is a Scala library for HTTP services. Prior to 0.23.35 and 1.0.0-M47 , its CookieJar client middleware uses unanchored substring checks instead of proper RFC 6265 domain and path matching when deciding whether to attach a stored cookie. As a result, a cookie intended for example.com can be...

CVE-2026-69215 Http4s: CookieJar middleware matches by substring, leaking cookies cross-origin

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, The CookieJar client middleware uses unanchored substring checks instead of RFC 6265 domain and path matching when deciding whether to attach a stored cookie. A cookie for example.com can consequently be sent to an...

CVE-2026-69215 Http4s: CookieJar middleware matches by substring, leaking cookies cross-origin

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, The CookieJar client middleware uses unanchored substring checks instead of RFC 6265 domain and path matching when deciding whether to attach a stored cookie. A cookie for example.com can consequently be sent to an...