Lucene search
+L

151 matches found

Kitploit
Kitploit
•added 2026/09/29 2:41 a.m.•18 views

Trespasser

CVE-2026-74970 · Firefox Fission site-isolation bypass via missing PipelineId namespace check This directory holds an honest reproduction scaffold for a Fission site-isolation authorization bypass in Firefox WebRender. Under Fission each content process owns a distinct PipelineId namespace, but t...

5.4CVSS6.8AI score0.00158EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/28 1:13 p.m.•8 views

Chrome-Skia-CVE-2024-8636

Fixed in Chrome M128: https://chromereleases.googleblog.com/2024/09/stable-channel-update-for-desktop10.html Steps to reproduce: 1. Apply the chromium.diff patch to chromium. 2. Run genskpic.py to generate drawablepicture.skp.hh, then move the generated file to src/gpu/commandbuffer/client. 3...

8.8CVSS7.3AI score0.00523EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/27 4:38 p.m.•11 views

Chrome-Skia-CVE-2024-8193

Corregido en Chrome M128: https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop28.html Pasos para reproducir: 1. Aplica el parche chromium.diff a chromium. 2. Ejecuta genskpic.py para generar drawablepicture.skp.hh, luego mueve el archivo generado a...

8.8CVSS7.4AI score0.00481EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/27 4:35 p.m.•11 views

Chrome-Skia-CVE-2024-8198

Corregido en Chrome M128: https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop28.html Pasos para reproducir: 1. Aplicar el parche chromium.diff a chromium. 2. Ejecutar genskpic.py para generar drawablepicture.skp.hh, luego mover el archivo generado a...

8.8CVSS7.4AI score0.00499EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/27 4:32 p.m.•11 views

Chrome-Skia-CVE-2024-7966

Corregido en Chrome M128: https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop21.html Pasos para reproducir: Aplica el parche chromium.diff a chromium. Ejecuta genskpic.py para generar drawablepicture.skp.hh, luego mueve el archivo generado a src/gpu/commandbuffer/clien...

8.8CVSS7.6AI score0.00669EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/24 4:03 p.m.•11 views

cve-2026-13934

CVE-2026-13934 Este es el repositorio del proyecto de trabajo. Investigación, análisis, trabajo e informes se manejan en un único repositorio D088/D091. Este archivo es el documento de entrada del repo/tablero. La convención completa de carpetas y entregables está en docs/conventions.md. El cuerp...

9.6CVSS6.4AI score0.00345EPSS
SaveExploits0References7
Kitploit
Kitploit
•added 2026/09/24 10:04 a.m.•9 views

CVE-2026-85048-the-gpu-died

CVE-2026-85048 — viz surface UAF GPU process Another one that triggers a very difficult to use UAF. The BackupRefPtr will swat it. Also this being in the stage 2, you have to patch to see it happen. Re-entrancy in Surface::UpdateActivationDependencies stores a stale allocation-group pointer...

8.3CVSS6.6AI score0.00404EPSS
SaveExploits0
AstraLinux
AstraLinux
•added 2026/09/14 12:41 p.m.•13 views

Astra Linux – Vulnerability in Chromium

A stack buffer overflow in the GPU process in Google Chrome on Linux prior to version 88.0.4324.182 allowed a remote attacker to potentially perform out-of-bounds memory access through a crafted HTML page...

8.8CVSS8AI score0.01273EPSS
SaveExploits1References1
EUVD
EUVD
•added 2026/09/02 12:31 a.m.•38 views

EUVD-2026-69737

Buffer overflow in GPU in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

6.2AI score0.00444EPSS
SaveExploits0References3
NVD
NVD
•added 2026/08/25 9:18 p.m.•10 views

CVE-2026-79071

Race condition in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

8.3CVSS0.00323EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/08/25 8:10 p.m.•7 views

CVE-2026-79071

Race condition in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

5.8AI score0.00323EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/25 8:10 p.m.•8 views

EUVD-2026-65829

Race condition in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

5.8AI score0.00323EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/08/25 8:10 p.m.•13 views

CVE-2026-79071

Race condition in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

8.3CVSS6AI score0.00323EPSS
SaveExploits0
NVD
NVD
•added 2026/08/18 9:18 p.m.•11 views

CVE-2026-76042

Use of uninitialized resource in GPU in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

3.1CVSS0.00251EPSS
SaveExploits0References2
OSV
OSV
•added 2026/08/18 9:18 p.m.•9 views

DEBIAN-CVE-2026-76042

Use of uninitialized resource in GPU in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

3.1CVSS5.4AI score0.00251EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/18 8:31 p.m.•270 views

CVE-2026-76042

Google Chrome versions prior to 151.0.7922.169 are vulnerable to a memory disclosure issue caused by the use of uninitialized resources in the GPU . A remote attacker who has already compromised the renderer process can exploit this by using a crafted HTML page to read memory outside the sandbox ...

3.1CVSS5.3AI score0.00251EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
•added 2026/08/18 8:31 p.m.•13 views

CVE-2026-76042

Use of uninitialized resource in GPU in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

3.1CVSS5.4AI score0.00251EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•14 views

PT-2026-77329

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.169 Description A remote attacker who has compromised the renderer process can read memory outside the sandbox by using a crafted HTML page. This is caused by the use of an uninitialized resource in t...

3.1CVSS5.3AI score0.00251EPSS
SaveExploits0References24
Microsoft CVE
Microsoft CVE
•added 2026/08/12 12:01 a.m.•15 views

CVE-2026-19140 Use after free in GPU

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.3CVSS5.8AI score0.00304EPSS
SaveExploits0
UbuntuCve
UbuntuCve
•added 2026/08/06 10:16 p.m.•9 views

CVE-2026-19146

Uninitialized Use in GPU in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

5.3CVSS5.3AI score0.00308EPSS
SaveExploits0References3
Rows per page
Query Builder