Chromium: CVE-2026-13853 Use after free in Journeys

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

EUVD-2026-40539

Use after free in Journeys in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-13853

Use after free in Journeys in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-13853

Use after free in Journeys in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-13853

Use after free in Journeys in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-13853

CVE-2026-13853 — Use-after-free in Journeys of Google Chrome prior to 150.0.7871.47 could allow a renderer-compromised remote attacker to escape the sandbox via a crafted HTML page. Affected: Chrome (Journeys) with renderer process involvement; root cause: use-after-free in Journeys. Impact: pote...

CVE-2026-13853

Use after free in Journeys in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

civil-war-journeys.org Cross Site Scripting vulnerability OBB-3842868

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

americanjourneys.org Cross Site Scripting vulnerability OBB-3663928

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

insiderjourneys.com.au XSS vulnerability

Open Bug Bounty ID: OBB-717365 Description| Value ---|--- Affected Website:| insiderjourneys.com.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

Unfixed XSS vulnerability at www.globusjourneys.ca

Security researcher xylitol, has submitted on 07/10/2008 a cross-site-scripting XSS vulnerability affecting www.globusjourneys.ca, which at the time of submission ranked 3676767 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2008. It is...