rendering-code-outside-the-sandbox-cve-2026-76036-dawn-webgpu-buffer-overflow-in-chrome-on-android

CVE-2026-76036 — Dawn WebGPU NPOT 深度/模板 Mipmap 检测框架 在 Dawn （Chromium 的 WebGPU 实现）中存在严重（CVSS 9.6，CWE-122）堆缓冲区溢出漏洞，影响 Android 上早于 151.0.7922.169 的 Google Chrome （稳定版 151，发布于 2026-08-18）。 根据 Dawn 修复提交 178fb7048ad3，根本原因是：PowerVR 专有 Vulkan 驱动会错误计算非二次幂（NPOT）深度/模板纹理的 mip 层级大小 。在受影响硬件上，网页调用...

CVE-2026-5281

⚡ CVE-2026-5281 - Chrome Dawn WebGPU Use-After-Free Questa vulnerabilità ha colpito uno dei clienti a cui forniamo servizi. Questo repository è il nostro contributo alla ricerca originale: un punto di partenza centralizzato per il gruppo, così che se una vulnerabilità simile che colpisce questo...

Exploit for Heap-based Buffer Overflow in Google Chrome

CVE-2026-76036 — Dawn WebGPU NPOT Depth/Stencil Mipmap Detec...

New Chrome Zero-Day CVE-2026-5281 Under Active Exploitation — Patch Released

Google on Thursday released security updates for its Chrome web browser to address 21 vulnerabilities, including a zero-day flaw that it said has been exploited in the wild. The high-severity vulnerability, CVE-2026-5281 CVSS score: N/A, concerns a use-after-free bug in Dawn, an open-source and...

PT-2024-5483 · Google +4 · Google Chrome +4

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 127.0.6533.88 Microsoft Edge affected versions not specified Description: The issue is related to the use of uninitialized variables in the Dawn component, which implements the WebGPU specification. This could...