CVE-2026-95278

A flaw was found in chromium-browser. Due to missing authorization in the WakeLock component, a remote attacker who has already compromised the browser's renderer process can bypass system access restrictions. An attacker could exploit this vulnerability by convincing a user to open a specially...

CVE-2026-95308

A flaw was found in chromium-browser. An integer overflow in the Metrics component allows a remote attacker who has already compromised the renderer process to read memory outside the security sandbox. By convincing a user to visit a crafted HTML page, the attacker can exploit this issue to acces...

CVE-2026-95371

A flaw was found in chromium-browser. A missing authorization check in the Views component allows a remote attacker who has compromised the renderer process to spoof user interface UI elements. By tricking a user into visiting a crafted web page, the attacker can display deceptive interface...

CVE-2026-95375

A flaw was found in chromium-browser. An incorrect authorization issue in the BrowserTag component allows a remote attacker who has compromised a renderer process to bypass the web origin policy via a crafted HTML page. This allows the attacker to circumvent the security boundary that isolates da...

CVE-2026-95290

A flaw was found in chromium-browser. Due to missing authorization checks in the Near Field Communication NFC component, a remote attacker who has compromised a renderer process can bypass system access restrictions via a crafted HTML page. Successful exploitation allows the attacker to access...

CVE-2026-95372

A flaw was found in the Chromecast component of chromium-browser. This vulnerability can lead to arbitrary code execution outside the browser's security sandbox. A remote attacker who has already compromised the renderer process could trigger a use-after-free memory flaw by convincing a user to...

CVE-2026-95334

A flaw was found in chromium-browser. Incorrect reference resolution in the WebProtect feature allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the browser sandbox. By convincing a user to load a specially crafted HTML page, the...

InlineExecute-Assembly

InlineExecute-Assembly InlineExecute-Assembly es una prueba de concepto de archivo de objeto de baliza BOF que permite a los profesionales de seguridad realizar la ejecución de ensamblados .NET en proceso como alternativa al módulo tradicional de fork and run execute-assembly de Cobalt Strike...

SharpHook

SharpHook SharpHook está inspirado en el proyecto SharpRDPThief. Utiliza varios hooks de API para obtener las credenciales deseadas. En segundo plano, usa el proyecto EasyHook. Una vez que el proceso deseado está en ejecución, SharpHook inyecta automáticamente sus dependencias en el proceso...

CVE-2026-102820

The pageant Windows crate (prior to version 0.2.3 ) contains an out-of-bounds read and oversized allocation vulnerability in the MemoryMap::read function located at pageant/src/wmmessage.rs. The root cause is that the function trusts a peer-controlled u32 response length provided via an 8192-byte...

CVE-2026-95382

Improper input validation in Auth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95372

Use after free in Chromecast in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-95381

Improper input validation in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95375

Incorrect authorization in BrowserTag in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95366

Use of released resource in Core in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95367

Information leak in DataTransfer in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-95359

Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95351

Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-95354

Use after free in Verifier in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Medium...

CVE-2026-95348

Use after free in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...