40082 matches found
DEBIAN-CVE-2026-10022
Type Confusion in V8 in Google Chrome prior to 148.0.7778.216 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. Chromium security severity: Medium...
CVE-2026-10022
Type Confusion in V8 in Google Chrome prior to 148.0.7778.216 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. Chromium security severity: Medium...
CVE-2026-10022
A Type Confusion vulnerability exists in the V8 engine of Google Chrome (prior to version 148.0.7778.216) and Microsoft Edge (as it ingests Chromium). An attacker who successfully convinces a user to install a malicious extension can use a crafted extension to execute arbitrary code inside a sand...
CVE-2026-9983
Type Confusion in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-9973
Out of bounds write in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-9973
Out of bounds write in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-9973
A vulnerability in the V8 engine of Google Chrome (and affected by Chromium ) allows a remote attacker to execute arbitrary code within a sandbox. This is caused by an out-of-bounds write (buffer overflow) triggered by a crafted HTML page or JavaScript script handlers. The issue affects versions ...
CVE-2026-9973
Out of bounds write in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-9965
Out of bounds write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2026-9940
Heap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2026-9940
Heap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2026-9938
Inappropriate implementation in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-9938
A high-severity vulnerability exists in the V8 engine of Google Chrome (prior to version 148.0.7778.216 ) due to an inappropriate implementation. A remote attacker can exploit this by serving a crafted HTML page to execute arbitrary code within a sandbox. Impact includes potential for denial of s...
CVE-2026-9936
A use after free vulnerability exists in the GFX component of Google Chrome (and Microsoft Edge ) on Mac systems prior to version 148.0.7778.216 . A remote attacker who has already compromised the renderer process can exploit this flaw via a crafted HTML page to potentially achieve a sandbox esca...
CVE-2026-9927
Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-9924
Heap buffer overflow in ANGLE in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2026-9914
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2026-9915
A heap buffer overflow in the ANGLE component of Google Chrome and Microsoft Edge (prior to version 148.0.7778.216 ) allows a remote attacker who has already compromised the renderer process to perform a sandbox escape using a crafted HTML page. The vulnerability stems from operations executed ou...
CVE-2026-9914
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...