CVE-2025-2783

Chromium CVE-2025-2783: Escape de Sandbox y Exploit RCE de Cadena Completa Este repositorio contiene una implementación de exploit de cadena completa para CVE-2025-2783. La vulnerabilidad reside en la capa de comunicación Ipcz de Chromium, permitiendo a un atacante lograr un escape de sandbox y...

CVE-2022-28281

CVE-2022-28281: Escritura fuera de límites en Mozilla Firefox debido a extensiones WebAuthN inesperadas Este es un error que puede desencadenarse desde un proceso de renderizado de Firefox en Windows comprometido. Si un proceso de contenido comprometido envía un número inesperado de extensiones...

EUVD-2026-82484

Race condition in FileSystem in Google Chrome prior to 153.0.8010.52 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-91744

A flaw was found in Google Chrome. A race condition in the PlatformIntegration component could allow a remote attacker, who has compromised the renderer process and leveraged social engineering, to obtain sensitive information. This can occur when a user visits a specially crafted HTML page...

CVE-2026-91712

A flaw was found in Google Chrome Extensions. A race condition exists that could be exploited by a remote attacker who has already compromised the browser's renderer process. By crafting a malicious HTML page, the attacker could potentially execute arbitrary code outside of the browser's security...

CVE-2026-91735

A flaw was found in Google Chrome's WebUI. This incorrect authorization vulnerability allows a remote attacker, who has already compromised the browser's renderer process, to potentially execute arbitrary code outside of the security sandbox. This exploitation occurs when the attacker provides a...

CVE-2026-91733

A flaw was found in Skia, a 2D graphics library used in chromium-browser. This improper state validation vulnerability allows a remote attacker, who has already compromised the renderer process, to read memory outside of the security sandbox. This can be achieved by enticing a user to open a...

CVE-2026-91739

A flaw was found in the Transactions Platform component of Google Chrome. A remote attacker, after compromising the renderer process, could exploit a missing authorization vulnerability. This could allow the attacker to spoof user interface UI elements by crafting a malicious HTML page, potential...

CVE-2026-91747

A flaw was found in Skia, a 2D graphics library used in Google Chrome. A remote attacker, after compromising the renderer process, could exploit a use-after-free vulnerability by crafting a malicious HTML page. This could allow the attacker to obtain sensitive cross-origin data...

CVE-2026-91730

A flaw was found in chromium-browser. This incomplete cleanup vulnerability in the GetUserMedia component allows a remote attacker, who has compromised the renderer process and leveraged social engineering, to obtain sensitive cross-origin data. This can lead to unauthorized information disclosur...

CVE-2026-91743

A flaw was found in Google Chrome. A race condition in the browser's core component could allow a remote attacker, who has already compromised the renderer process, to execute arbitrary code outside of the browser's security sandbox. This exploitation is possible by tricking a user into visiting ...

CVE-2026-91747

Use after free in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-91743

Race condition in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91744

Race condition in PlatformIntegration in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: High...

CVE-2026-91748

Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: High...

CVE-2026-91735

Incorrect authorization in WebUI in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91730

Incomplete cleanup in GetUserMedia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-91733

Improper state validation in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-91733

Improper state validation in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91724

Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...