24621 matches found
EUVD-2026-102517
Improper input validation in Desktop in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-102514
Memory corruption in SVG in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to read memory via a crafted HTML page. Chromium security severity: High...
CVE-2026-110914
Memory corruption in Workers in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-110916
Improper input validation in Desktop in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-110916
A vulnerability in Google Chrome for Desktop (prior to version 155.0.8059.84 ) was caused by improper input validation . This flaw could allow a remote attacker to achieve arbitrary code execution outside the sandbox by tricking a user into visiting a crafted HTML page . No specific exploit detai...
CVE-2026-110920
A memory corruption vulnerability exists in the V8 engine of Google Chrome versions prior to 155.0.8059.84 . A remote attacker can exploit this flaw by tricking a user into visiting a crafted HTML page , potentially leading to arbitrary code execution inside the browser sandbox. Google addressed ...
CVE-2026-110918
Memory corruption in Core in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to read memory via a crafted HTML page. Chromium security severity: High...
CVE-2026-110921
A use-after-free vulnerability in the V8 JavaScript engine allows a remote attacker to execute arbitrary code inside the browser sandbox. This flaw occurs because memory is accessed after being released, and it can be triggered by convincing a user to visit a crafted HTML page . The vulnerability...
CVE-2020-6418
CVE-2020-6418 The CVE 2020-6418 is about the the type confusion in V8 in Google chrome.The affected versions were prior to 80.0.3987.122. The vulnerability is achived by remote attacker accessing the shell of a target device via a crafted HTML page. Environment Requirements 1. Google Chrome with...
CVE-2023-4357-Exploitation
CVE-2023-4357-Exploitation Network Security Project Description Insufficient validation of untrusted input in XML in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to bypass file access restrictions via a crafted HTML page. Reproduce Set up the Environment Download Chrome on Linux...
CVE-2021-30573
CVE 2021-30573 Google Chrome Vulnerabilities CVE-2021-30573 Use after free in GPU in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2021-30573 Detail Vulnerable versions : The bug works in Google Chrome 91 or lower. It is patched in 92+...
CVE-2026-110141
Observable discrepancy in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...
EUVD-2026-100633
Use after free in Bindings in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: High...
EUVD-2026-100636
Information leak in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: High...
EUVD-2026-100653
Observable discrepancy in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...
Preload Component Access Information Disclosure
The vulnerability of the Preload component in Google Chrome and Microsoft Edge is related to the use of a name with an incorrect link. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...
FoldableAPIs Component Access Information Disclosure
The vulnerability of the FoldableAPIs component in Google Chrome and Microsoft Edge relates to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to gain access to protected information through a specially created HTML page...
WebRTC Component Access Protected Information
The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge is related to insufficient validation of input protected information. Exploiting this vulnerability can allow a malicious actor to gain access to protected information through a specially created HTML page...
Geometry Component Google Chrome Microsoft Edge Protected Information DoS
The vulnerability of the Geometry component in Google Chrome and Microsoft Edge relates to the false representation of critical information to the user interface. Exploiting this vulnerability can allow a malicious actor to gain access to protected information, as well as cause service...
Animation Component Google Chrome Microsoft Edge DoS
The vulnerability of the Animation component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...