PT-2026-44660

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.216 Description A use after free issue exists in WebAudio, which allows a remote attacker to execute arbitrary code within a sandbox by utilizing a specially crafted HTML page. Use after free is a...

CVE-2026-9120

Use after free in WebRTC in Google Chrome prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: High...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 browser allows a hacker to trigger a service failure.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

The vulnerability of Google Chrome’s DevTools component allows a hacker to bypass security restrictions.

The vulnerability of Google Chrome’s DevTools component is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions through a specially created HTML page...

The vulnerability of the ANGLE library in the Google Chrome browser for MacOS operating systems allows a hacker to execute arbitrary code.

The vulnerability of the ANGLE library in the Google Chrome browser for MacOS operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created HTML page...

CVE-2026-40928

WWBN AVideo is an open source video platform. In versions 29.0 and prior, multiple AVideo JSON endpoints under objects/ accept state-changing requests via $REQUEST/$GET and persist changes tied to the caller's session user, without any anti-CSRF token, origin check, or referer check. A malicious...

The vulnerability in the implementation of the WebUSB protocol of Google Chrome allows a perpetrator to disclose protected information.

The vulnerability of the WebUSB protocol implementation in Google Chrome browser is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to disclose sensitive information through a specially created HTML page...

The vulnerability of Google Chrome’s Skia graphic library allows attackers to gain unauthorized access to protected information.

The vulnerability of Google Chrome’s Skia graphics library is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created HTML page...

Google Chrome XR Memory Misreference Vulnerability

Google Chrome is a web browser developed by Google. Google Chrome suffers from a memory misreference vulnerability. The vulnerability stems from a memory object misreference in the XR component of the Android version and can be exploited by an attacker to perform an out-of-bounds memory read via ...

CVE-2026-6313

Insufficient policy enforcement in CORS in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

The vulnerability of the WebMIDI component in Google Chrome and Microsoft Edge browsers allows attackers to trigger a service failure.

The vulnerability of the WebMIDI component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause a service failure through a specially crafted HTML page...

CVE-2026-5888

Uninitialized Use in WebCodecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-5876

Side-channel information leakage in Navigation in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

The vulnerability of the WebCodecs component in Google Chrome allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of Google Chrome’s WebCodecs component relates to reading data beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure by using a specially created HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-5286

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security...

PT-2026-29463

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 146.0.7680.178 Description A use-after-free issue existed in the WebGL component of Google Chrome. This allowed a remote attacker to potentially execute arbitrary code within a sandbox through a specially crafte...

The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge browsers allows a hacker to induce a service failure.

The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure through a specially created HTML page...

The vulnerability of the rendering mechanism of Blink in Google Chrome and Microsoft Edge browsers allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the rendering mechanism in Google Chrome and Microsoft Edge browsers relates to reading data beyond the permitted range in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge browsers allows a hacker to induce a service failure.

The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure through a specially crafted HTML page...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to cause an out-of-bounds memory read to be performed via a specially crafted HTML page...