CVE-2026-79030

A flaw was found in Chromium's Autofill feature. A remote attacker could exploit an observable discrepancy by crafting a malicious HTML page. This could allow the attacker to obtain sensitive user information...

CVE-2026-79068

A flaw was found in Google Chrome's StreamsAPI. A remote attacker could exploit improper resource exposure by crafting a malicious HTML page. This could potentially allow the attacker to bypass the web origin policy and gain access to a privileged page...

CVE-2026-79097

A flaw was found in Chromium. A remote attacker could exploit a use-after-free vulnerability in the V8 JavaScript engine by crafting a malicious HTML page. This could allow the attacker to execute arbitrary code within the sandbox environment, potentially leading to a compromise of the affected...

CVE-2026-16413

A flaw was found in ANGLE, a component of Chromium. A remote attacker who has compromised the renderer process could exploit an out-of-bounds write vulnerability by crafting a malicious HTML page. This could potentially allow the attacker to escape the sandbox, leading to further system compromis...

The vulnerability in the Google Chrome web browser for iOS operating systems allows a hacker to increase their privileges.

The vulnerability in the Google Chrome web browser for iOS operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges through a specially created HTML page...

The vulnerability of the Fenced Frames privacy function in Google Chrome allows a hacker to replace the user interface.

The vulnerability of the Fenced Frames privacy function in Google Chrome relates to information representation errors in the user interface. Exploiting this vulnerability could allow a malicious actor to replace the user interface with a specially created HTML page...

CVE-2025-56710

A Cross-Site Request Forgery CSRF vulnerability was identified in the Profile Page of the PHPGurukul Student-Result-Management-System-Using-PHP-V2.0. This flaw allows an attacker to trick authenticated users into unintentionally modifying their account details. By crafting a malicious HTML page, ...

Information Exposure

Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Information Exposure via the Loader component. An attacker can leak sensitive cross-origin data by crafting...

Geovision GV-ASManager 6.1.10 Cross Site Request Forgery

Geovision GV-ASManager versions 6.1.10 and below suffer from a cross site request forgery vulnerability. CVE-2024-56901 CVE-2024-56901 - A Cross-Site Request Forgery CSRF vulnerability in Geovision GV-ASManager web application with the version 6.1.1.0 or less that allows attackers to arbitrarily...

The vulnerability of the application programming interfaces of Google Chrome and Microsoft Edge allows a hacker to bypass existing security restrictions and perform a substitution of the user interface.

The vulnerability of the application programming interfaces of Google Chrome and Microsoft Edge relates to the bypassing of authentication processes through spoofing techniques. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions and replace the use...

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge browsers allows a hacker to replace the user interface.

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to improper security checks for standard elements. Exploiting this vulnerability could allow a malicious actor to replace the user interface with a specially created HTML page...

Heap Buffer Overflow

bash is vulnerable to a heap buffer overflow. The vulnerability exists in validparametertransform function of subst.c which allows an attacker to crash the system through potentially exploit heap corruption via a malicious HTML page...

Use After Free

chromium:sid is vulnerable to use after free. It allowed a remote attacker to potentially exploit heap corruption via a malicious HTML page...

Denial Of Service (DoS)

chromium is vulnerable to denial of service. The vulnerability exists due to the out of bound read in the Dawn, allowing an attacker to crash the application by providing a maliciously crafted HTML page...

Use-After-Free

chromium is vulnerable to use-after-free. The vulnerability exists in performance manager due to heap corruption which allows an attacker to crash the application via a malicious HTML page...

Denial Of Service (DoS)

chromium is vulnerable to denial of service. An attacker is able to crash the system by exploiting a heap corruption via a maliciously crafted HTML page...

Arbitrary Code Execution

chrome is vulnerable to arbitrary code execution. A type confusion in V8 in Google Chrome allows a remote attacker to execute arbitrary code inside a sandbox via a malicious HTML page...

Arbitrary Code Execution

chromium is vulnerable to arbitrary code execution. A remote attacker is able to exploit the heap corruption via a malicious HTML page...

Heap Buffer Overflow

chromium is vulnerable to heap buffer overflow. The vulnerability exists when an attacker send a malicious HTML page, causing a heap corruption...

Content Spoofing

chromium is vulnerable to content spoofing. An insecure implementation allows an attacker who has compromised the renderer process to spoof contents of the Omnibox via a malicious HTML page...