136 matches found
CVE-2026-113312
A flaw was found in the Autofill component of Chromium. This memory corruption vulnerability allows a remote attacker to execute arbitrary code within the browser's isolated security sandbox. An attacker could exploit this flaw by enticing a user to visit a specially crafted HTML page...
CVE-2026-113072
A flaw was found in chromium-browser. A memory corruption vulnerability exists in the handling of Cascading Style Sheets CSS. A remote attacker could exploit this flaw by convincing a user to view a specially crafted HTML page, potentially leading to arbitrary code execution outside the browser's...
CVE-2026-113300
A flaw was found in the Forms component of chromium-browser. This vulnerability allows a remote attacker to achieve arbitrary code execution outside of the browser security sandbox. By tricking a user into visiting a specially crafted HTML page, an attacker can trigger an out-of-bounds memory wri...
CVE-2026-91379
A flaw was found in OpenJDK's JDK tools component. An unauthenticated local attacker can exploit this vulnerability by convincing a user to interact with untrusted code in an environment relying on the Java security sandbox. A successful attack can result in unauthorized creation, modification, o...
CVE-2026-93372
A flaw was found in chromium-browser. A remote attacker can achieve arbitrary code execution outside the browser's security sandbox due to a buffer overflow in the Web Graphics Library WebGL component. An attacker can exploit this vulnerability by enticing a user to visit a specially crafted web...
CVE-2026-106412
A race condition flaw was found in the Core component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/520755056...
chromium-browser: angle: ANGLE: Arbitrary code execution via use after free
A flaw was found in ANGLE, a component of Google Chrome. This use-after-free vulnerability allows a remote attacker to execute arbitrary code outside the browser's security sandbox. The attacker could exploit this by enticing a user to visit a specially crafted HTML page...
CVE-2026-95339
An use after free flaw was found in the ServiceWorker component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/548585299...
CVE-2026-93382
A flaw was found in Chromium. This use-after-free vulnerability in PDFium allows a remote attacker to execute arbitrary code. By enticing a user to open a specially crafted HTML page, an attacker can exploit this flaw to gain control within the browser's security sandbox...
CVE-2026-91728
An integer overflow flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=556715288...
PT-2026-91197
Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Syncope. An administrator with adequate entitlements for Implementations can create a malicious Groovy Command class containing untrusted code in their CommandArgs static implementation, bypassing the Groovy security...
CVE-2026-87654
A flaw was found in Chromium's ANGLE component. A remote attacker could exploit a buffer overflow vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to the execution of arbitrary code outside the browser's security sandbox, potentially compromising the affect...
CVE-2026-87621
A flaw was found in ANGLE, a component of Google Chrome. This out-of-bounds write vulnerability allows a remote attacker to potentially execute arbitrary code. By tricking a user into visiting a specially crafted HTML page, an attacker could bypass the browser's security sandbox and execute...
CVE-2026-87613
A flaw was found in Chromium Extensions. A remote attacker could exploit an incorrect reference resolution vulnerability by sending crafted network traffic. This could potentially allow the attacker to execute arbitrary code outside of the browser's security sandbox...
CVE-2026-87527
A flaw was found in the WebGL component of Chromium-based browsers. This buffer overflow vulnerability allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. This can be triggered by a specially crafted HTML page, potentially leading to a complete compromise...
CVE-2026-87492
A flaw was found in DevTools in Google Chrome. This incorrect authorization vulnerability allows a remote attacker to potentially execute arbitrary code outside the browser's security sandbox. The exploitation occurs when a user interacts with a specially crafted HTML page, leading to a severe...
CVE-2026-87488
An use after free flaw was found in the WebGL component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=546252753...
CVE-2026-87474
A flaw was found in Google Chrome. A use-after-free vulnerability in the Payments component could allow a remote attacker to execute arbitrary code outside of the browser's security sandbox. This exploitation is possible by enticing a user to visit a specially crafted HTML page...