PT-2026-81574

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Media component allows a remote attacker to potentially execute arbitrary code outside the sandbox by inducing a user to visit a crafted HTML page...

PT-2026-81557

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use after free issue exists in Views, which could allow a remote attacker to potentially execute arbitrary code outside the sandbox. This is achieved by leveraging social engineering ...

PT-2026-81560

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A buffer overflow exists in WebGL, which allows a remote attacker to execute arbitrary code outside the sandbox by inducing the user to visit a specially crafted HTML page. A buffer...

PT-2026-81547

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 152.0.7977.65 Description A remote attacker could potentially execute arbitrary code outside the sandbox by using a crafted HTML page. This issue is caused by the use of an uninitialized variable in the...

PT-2026-81551

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use after free issue exists in Chromecast. A remote attacker who has compromised the renderer process can execute arbitrary code outside the sandbox by using a crafted HTML page. Use...

PT-2026-81749

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An out-of-bounds write in ANGLE allows a remote attacker to potentially execute arbitrary code outside the sandbox when a user opens a crafted HTML page. ANGLE Almost Native Graphics...

PT-2026-81637

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An out of bounds write in ANGLE allows a remote attacker to potentially execute arbitrary code outside the sandbox when a user opens a crafted HTML page. ANGLE Almost Native Graphics...

PT-2026-81775

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An integer overflow in WebGL allows a remote attacker to potentially execute arbitrary code outside the sandbox by using a crafted HTML page. An integer overflow occurs when an arithmet...

PT-2026-81790

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in ANGLE, a graphics abstraction layer, allows a remote attacker to potentially execute arbitrary code outside the sandbox by inducing the user to visit a...

PT-2026-81778

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the Sandbox allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox by using a crafted HTM...

PT-2026-81692

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Printing component allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox by using ...

PT-2026-81779

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use after free issue exists in the Bluetooth component. A remote attacker can leverage social engineering to execute arbitrary code outside the sandbox by using a crafted Chrome...

PT-2026-81727

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use after free issue in ANGLE allows a remote attacker to execute arbitrary code outside the sandbox by using a crafted HTML page. Use after free is a memory corruption flaw that occu...

PT-2026-81646

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use after free issue in Aura allows a remote attacker to execute arbitrary code outside the sandbox by inducing the user to visit a crafted HTML page. Use after free is a memory...

Browser-Pwning-

Browser-Pwning Una documentazione adeguata e ben strutturata per iniziare con il chrome pwning & il v8 pwning Struttura del documento Come è organizzato questo documento 1. Motivazione 2. Materiale di Studio Reale Motivazione I browser sono una delle tecnologie più utilizzate oggi. Su ogni comput...

CVE-2026-43655-AppleM2ScalerCSCDriver-UAF

CVE-2026-43655: use-after-free dello scheduler condiviso di AppleM2ScalerCSCDriver Divulgazione tecnica pubblica per CVE-2026-43655 , un use-after-free di AppleM2ScalerCSCDriver / IOSurfaceAccelerator raggiungibile dal sandbox predefinito delle app iOS senza autorizzazioni speciali. Apple ha...

Exploit for Improper Privilege Management in Mozilla Firefox

CVE-2026-74939 — Firefox content→parent privilege escalation...

CVE-2026-53753-Crawl4AI-RCE

CVE-2026-53753 — Esecuzione Remota di Codice non autenticata in Crawl4AI Evasione del Sandbox AST RCE pre-autenticazione in Crawl4AI.read — restituendo l'output del comando in-band nella risposta JSON...

CVE-2026-2796-and-CVE-2026-2768-escape-the-wasm-box

CVE-2026-2796 + CVE-2026-2768 — Fuga dalla Wasm Box Ricerca sullo sfruttamento di Firefox a catena completa: una type confusion in WebAssembly per l'esecuzione di codice nel renderer , concatenata a un bug del processo padre per una fuga dalla sandbox. Entrambi i bug sono stati corretti in Firefo...

CVE-2026-2796-escape-wasm-by-using-wasm

CVE-2026-2796 — SpiderMonkey WebAssembly सैंडबॉक्स एस्केप CVE-2026-2796 के लिए प्रूफ-ऑफ-कॉन्सेप्ट एक्सप्लॉइट चेन, जो Mozilla SpiderMonkey के WebAssembly इम्पोर्ट ऑप्टिमाइज़ेशन "JavaScript: WebAssembly" कंपोनेंट में JIT गलत-संकलन / टाइप-कन्फ्यूज़न है। एक क्राफ्टेड wasm मॉड्यूल संपूर्ण होस्ट प्रोसे...