CVE-2025-2783

Chromium CVE-2025-2783：沙盒逃逸与全链远程代码执行利用 本仓库包含了 CVE-2025-2783 的完整利用链实现。该漏洞存在于 Chromium 的 Ipcz 通信层，允许攻击者从受限的渲染器进程中实现沙盒逃逸和任意代码执行。该利用支持 134.0.6998.177 及之前的版本。 https://github.com/user-attachments/assets/a3e2bf34-739c-4db7-9101-0f4d48987ad0 1. 项目结构 src/ ：核心利用实现。包含针对 CVE-2025-2783 的 Ipcz 劫持逻辑、V8...

CVE-2026-106388

A flaw was found in chromium-browser. A missing authorization check in the DataTransfer component allows a remote attacker who has compromised the renderer process to obtain sensitive information. By tricking a user into loading a specially crafted HTML page, the attacker can bypass restrictions ...

Linux Distros Unpatched Vulnerability : CVE-2026-106363

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in FullScreen in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged...

Linux Distros Unpatched Vulnerability : CVE-2026-106228

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Confused deputy in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute...

Linux Distros Unpatched Vulnerability : CVE-2026-106194

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged...

Linux Distros Unpatched Vulnerability : CVE-2026-106378

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Privilege elevation in Sandbox in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute...

Linux Distros Unpatched Vulnerability : CVE-2026-106230

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect reference resolution in Offline in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer proce...

Linux Distros Unpatched Vulnerability : CVE-2026-106351

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Observable discrepancy in Safebrowsing in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to...

Linux Distros Unpatched Vulnerability : CVE-2026-106320

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use of released resource in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements v...

Linux Distros Unpatched Vulnerability : CVE-2026-106279

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect reference resolution in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker who had compromised the renderer process ...

Linux Distros Unpatched Vulnerability : CVE-2026-106191

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute...

Linux Distros Unpatched Vulnerability : CVE-2026-106284

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds read in Printing in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and...

Linux Distros Unpatched Vulnerability : CVE-2026-106339

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use of released resource in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially obtai...

Linux Distros Unpatched Vulnerability : CVE-2026-106303

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Observable discrepancy in Autofill AI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged...

Linux Distros Unpatched Vulnerability : CVE-2026-106345

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use of released resource in Session in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI...

CVE-2026-106339

A flaw was found in the Core component of chromium-browser. A remote attacker who has compromised a browser renderer process could exploit a use of released resource condition by enticing a user to visit a crafted HTML page. Successful exploitation allows the attacker to access cross-origin data...

CVE-2026-106266

A flaw was found in chromium-browser. This vulnerability allows a remote attacker who has compromised a renderer process to bypass the web origin policy and access privileged browser pages. The issue is caused by a confused deputy condition in the Contextual Tasks component, which can be triggere...

DEBIAN-CVE-2026-106424

Information leak in Audio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-106424

Information leak in Audio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-106425

Missing authorization in BrowserTag in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...