Trespasser

CVE-2026-74970 · Firefox Fission site-isolation bypass via missing PipelineId namespace check This directory holds an honest reproduction scaffold for a Fission site-isolation authorization bypass in Firefox WebRender. Under Fission each content process owns a distinct PipelineId namespace, but t...

Chrome-Skia-CVE-2024-8636

Fixed in Chrome M128: https://chromereleases.googleblog.com/2024/09/stable-channel-update-for-desktop10.html Steps to reproduce: 1. Apply the chromium.diff patch to chromium. 2. Run genskpic.py to generate drawablepicture.skp.hh, then move the generated file to src/gpu/commandbuffer/client. 3...

Chrome-Skia-CVE-2024-8193

Corregido en Chrome M128: https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop28.html Pasos para reproducir: 1. Aplica el parche chromium.diff a chromium. 2. Ejecuta genskpic.py para generar drawablepicture.skp.hh, luego mueve el archivo generado a...

Chrome-Skia-CVE-2024-8198

Corregido en Chrome M128: https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop28.html Pasos para reproducir: 1. Aplicar el parche chromium.diff a chromium. 2. Ejecutar genskpic.py para generar drawablepicture.skp.hh, luego mover el archivo generado a...

Chrome-Skia-CVE-2024-7966

Corregido en Chrome M128: https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop21.html Pasos para reproducir: Aplica el parche chromium.diff a chromium. Ejecuta genskpic.py para generar drawablepicture.skp.hh, luego mueve el archivo generado a src/gpu/commandbuffer/clien...

cve-2026-13934

CVE-2026-13934 Este es el repositorio del proyecto de trabajo. Investigación, análisis, trabajo e informes se manejan en un único repositorio D088/D091. Este archivo es el documento de entrada del repo/tablero. La convención completa de carpetas y entregables está en docs/conventions.md. El cuerp...

CVE-2026-85048-the-gpu-died

CVE-2026-85048 — viz surface UAF GPU process Another one that triggers a very difficult to use UAF. The BackupRefPtr will swat it. Also this being in the stage 2, you have to patch to see it happen. Re-entrancy in Surface::UpdateActivationDependencies stores a stale allocation-group pointer...

Astra Linux – Vulnerability in Chromium

A stack buffer overflow in the GPU process in Google Chrome on Linux prior to version 88.0.4324.182 allowed a remote attacker to potentially perform out-of-bounds memory access through a crafted HTML page...

EUVD-2026-69737

Buffer overflow in GPU in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79071

Race condition in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79071

Race condition in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-65829

Race condition in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79071

Race condition in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-76042

Use of uninitialized resource in GPU in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-76042

Use of uninitialized resource in GPU in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-76042

Google Chrome versions prior to 151.0.7922.169 are vulnerable to a memory disclosure issue caused by the use of uninitialized resources in the GPU . A remote attacker who has already compromised the renderer process can exploit this by using a crafted HTML page to read memory outside the sandbox ...

CVE-2026-76042

Use of uninitialized resource in GPU in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-77329

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.169 Description A remote attacker who has compromised the renderer process can read memory outside the sandbox by using a crafted HTML page. This is caused by the use of an uninitialized resource in t...

CVE-2026-19140 Use after free in GPU

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-19146

Uninitialized Use in GPU in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...