134 matches found
Chrome-Skia-CVE-2024-8193
ๅจChrome M128ไธญๅทฒไฟฎๅค๏ผhttps://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop28.html ๅค็ฐๆญฅ้ชค๏ผ 1. ๅฐ chromium.diff ่กฅไธๅบ็จๅฐ chromiumใ 2. ่ฟ่ก genskpic.py ็ๆ drawablepicture.skp.hh๏ผ็ถๅๅฐ็ๆ็ๆไปถ็งปๅจๅฐ src/gpu/commandbuffer/clientใ 3. ๆๅปบๅนถๅฏๅจๆต่งๅจใ 4. ๆๅผ index.html ่งฆๅ PoCใ 5. GPU ่ฟ็จๅฐไผๅดฉๆบใ...
Chrome-Skia-CVE-2024-8198
Corregido en Chrome M128: https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop28.html Pasos para reproducir: 1. Aplicar el parche chromium.diff a chromium. 2. Ejecutar genskpic.py para generar drawablepicture.skp.hh, luego mover el archivo generado a...
Chrome-Skia-CVE-2024-7966
Corregido en Chrome M128: https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop21.html Pasos para reproducir: root@kitploit: Aplica el parche chromium.diff a chromium. Ejecuta genskpic.py para generar drawablepicture.skp.hh, luego mueve el archivo generado a...
Chrome-Skia-CVE-2024-8636
Fixed in Chrome M128: https://chromereleases.googleblog.com/2024/09/stable-channel-update-for-desktop10.html Steps to reproduce: 1. Apply the chromium.diff patch to chromium. 2. Run genskpic.py to generate drawablepicture.skp.hh, then move the generated file to src/gpu/commandbuffer/client. 3...
cve-2026-13934
CVE-2026-13934 Este es el repositorio del proyecto de trabajo. Investigaciรณn, anรกlisis, trabajo e informes se manejan en un รบnico repositorio D088/D091. Este archivo es el documento de entrada del repo/tablero. La convenciรณn completa de carpetas y entregables estรก en docs/conventions.md. El cuerp...
Trespasser
CVE-2026-74970 ยท Firefox Fission site-isolation bypass via missing PipelineId namespace check This directory holds an honest reproduction scaffold for a Fission site-isolation authorization bypass in Firefox WebRender. Under Fission each content process owns a distinct PipelineId namespace, but t...
EUVD-2026-69737
Buffer overflow in GPU in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-79071
Race condition in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79071
Race condition in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
Astra Linux โ Vulnerability in Chromium
Before version 148.0.7778.96, using free after in the GPU in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: Medium...
Astra Linux โ Vulnerability in Chromium
A stack buffer overflow in the GPU process in Google Chrome on Linux prior to version 88.0.4324.182 allowed a remote attacker to potentially perform out-of-bounds memory access through a crafted HTML page...
CVE-2026-76042
Use of uninitialized resource in GPU in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...
DEBIAN-CVE-2026-76042
Use of uninitialized resource in GPU in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-76042
Use of uninitialized resource in GPU in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-76042
CVE-2026-76042 is a use of uninitialized resource in the GPU component of Google Chrome prior to 151.0.7922.169 . A remote attacker who had already compromised the renderer process could read memory outside the sandbox via a crafted HTML page. Chromium rates this High severity, though the CVSS 3....
PT-2026-77329
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.169 Description A remote attacker who has compromised the renderer process can read memory outside the sandbox by using a crafted HTML page. This is caused by the use of an uninitialized resource in t...
Out-of-bounds Read
Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Out-of-bounds Read in the paint event image generation process when offscreen rendering is enabled. An...
Astra Linux โ Vulnerability in Chromium
Before version 149.0.7827.103, the out-of-bounds reading in WebRTC in Google Chrome allowed a remote attacker who had compromised the GPU process to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...
SUSE CVE-2026-12033
Out of bounds read in VideoCapture in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the GPU process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...
EUVD-2026-36353
Out of bounds read in VideoCapture in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the GPU process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...