15342 matches found
CVE-2026-19148
Google Chrome on Linux is vulnerable to an out-of-bounds write in the GPU component (prior to version 151.0.7922.109). A remote attacker who has already compromised the renderer process can exploit this flaw via a crafted HTML page to potentially achieve a sandbox escape . This vulnerability impa...
CVE-2026-19146
Uninitialized Use in GPU in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...
CVE-2026-19140
Use after free in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2026-19140
Use after free in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2026-19140: Use After Free
Use after free in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2026-19148: Out-of-bounds Write
Out of bounds write in GPU in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2026-19167: Integer Overflow or Wraparound
Integer overflow in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...
The vulnerability of the GPU components in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the GPU components in Google Chrome and Microsoft Edge relates to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted HTML page...
PT-2026-68693
Name of the Vulnerable Software and Affected Versions Google Chrome on Linux versions prior to 151.0.7922.109 Description An out of bounds write occurs in the GPU component, which may allow a remote attacker who has already compromised the renderer process to perform a sandbox escape. This is...
PT-2026-68712
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.109 Description An integer overflow in the GPU component allows a remote attacker who has already compromised the renderer process to leak cross-origin data. This is achieved by inducing the browser t...
chromium -- security fixes
Chrome Releases reports: This update includes 41 security fixes: 499602793 Critical CVE-2026-19137: Use after free in WebGL. 524824288 Critical CVE-2026-19149: Use after free in ura. 532941869 Critical CVE-2026-19154: Use after free in Skia. 534903095 Critical CVE-2026-19157: Out of bounds write ...
PT-2026-68691
Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.109 Description An uninitialized use in the GPU component allows a remote attacker who has already compromised the renderer process to retrieve potentially sensitive information from proces...
PT-2026-68685
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.109 Description A use after free issue exists in the GPU component. This allows a remote attacker who has already compromised the renderer process to potentially achieve a sandbox escape by using a...
Out-of-bounds Read
Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Out-of-bounds Read in the paint event image generation process when offscreen rendering is enabled. An...
CVE-2026-70598
CVE-2026-70598 affects Electron: prior to 39.8.10, 40.9.0, 41.2.1, and 42.0.0-beta.3, offscreen rendering frame data from the GPU process was not fully validated by the main process. A compromised GPU process could cause the main process to read out‑of‑bounds memory while producing paint images, ...
CVE-2026-70598 Electron: Off-screen rendering trusts GPU-supplied geometry over shared-memory size
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.10, 40.9.0, 41.2.1, and 42.0.0-beta.3, offscreen rendering frame data received from the GPU process was not fully validated by the main process. A compromised GPU process could...
CVE-2026-17802
A side-channel information leakage flaw was found in the GPU component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=514512198...
PT-2026-68203
Name of the Vulnerable Software and Affected Versions Electron versions prior to 39.8.10 Electron versions prior to 40.9.0 Electron versions prior to 41.2.1 Electron versions prior to 42.0.0-beta.3 Description In offscreen rendering mode, the main process does not fully validate frame data receiv...
CVE-2026-70598: Out-of-bounds Read
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.10, 40.9.0, 41.2.1, and 42.0.0-beta.3, offscreen rendering frame data received from the GPU process was not fully validated by the main process. A compromised GPU process could...
