CVE-2020-6418

CVE-2020-6418 CVE-2020-6418 涉及 Google Chrome 中 V8 引擎的类型混淆漏洞。受影响的版本早于 80.0.3987.122。远程攻击者可通过特制的 HTML 页面获取目标设备的 shell。 环境要求 1. 版本早于 80.0.3987.122 的 Google Chrome。 root@kitploit: Note : The Google chrome browser should run with no sandbox for the exploit to be succesfull. 2. Metasploit Framework 3...

CVE-2026-91721

Use after free in Internals in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-11645-Out-of-bounds-Read-Write

CVE-2026-11645 - Chrome V8 越界读取/写入漏洞利用 ⚠️ 警告 此代码仅供教育目的和授权测试使用。 📋 描述 CVE-2026-11645 是 Google Chrome V8 引擎中的一个越界读写 OOB 漏洞。远程攻击者可以通过精心构造的 HTML 页面在沙箱内执行任意代码。 技术细节 字段| 值 ---|--- CVE| CVE-2026-11645 CVSS| 8.8 高危 向量| AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 组件| V8 JavaScript 引擎 类型| CWE-125 越界读取, CWE-787 越界写入 ...

CVE-2021-30573

CVE 2021-30573 Google Chrome 漏洞 CVE-2021-30573 Google Chrome GPU 中的释放后使用漏洞，允许远程攻击者通过特制的 HTML 页面潜在地利用堆损坏。 CVE-2021-30573 详情 受影响版本： 此漏洞在 Google Chrome 91 及更低版本中存在。已在 92+ 92.0.4515.107 中修复。 使用方法： 只需在旧版 Chrome 中运行 exploit.html。 参考 https://vulners.com/cve/CVE-2021-30573...

CVE-2026-91735

A flaw was found in Google Chrome's WebUI. This incorrect authorization vulnerability allows a remote attacker, who has already compromised the browser's renderer process, to potentially execute arbitrary code outside of the security sandbox. This exploitation occurs when the attacker provides a...

CVE-2026-91725

A flaw was found in Chromium. A remote attacker could exploit an observable discrepancy in CSS by crafting a malicious HTML page. This vulnerability allows the attacker to leak sensitive information from the user's browser...

CVE-2026-91728

A flaw was found in V8, the JavaScript engine used in Google Chrome. An integer overflow vulnerability allows a remote attacker to execute arbitrary code within the browser's security sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page...

CVE-2026-91736

A flaw was found in Chromium. This use-after-free vulnerability in the Document Object Model DOM allows a remote attacker to execute arbitrary code within the sandbox. By enticing a user to visit a specially crafted HTML page, the attacker can exploit this flaw, leading to unauthorized code...

CVE-2026-91723

A flaw was found in Chromium, specifically within WebAppInstalls. A remote attacker could exploit a race condition by crafting a malicious HTML page. This could allow the attacker to spoof user interface UI elements, potentially misleading users...

CVE-2026-91745

A flaw was found in chromium-browser. This use-after-free vulnerability allows a remote attacker to execute arbitrary code within the browser's security sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page...

CVE-2026-91731

A flaw was found in Google Chrome. A type confusion vulnerability in the Compositing component allows a remote attacker to execute arbitrary code within the browser's security sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page, leading to unauthorized code...

DEBIAN-CVE-2026-91749

Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

DEBIAN-CVE-2026-91743

Race condition in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-91745

Use after free in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-91746

Integer overflow in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-91746

Integer overflow in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-91736

Use after free in DOM in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91741

Type confusion in CacheStorage in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-91737

Use after free in PDF in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-91738

Improper input validation in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...