21 matches found
CVE-2026-113004
A flaw was found in chromium-browser. A memory corruption vulnerability in the Sync component allows a remote attacker to achieve arbitrary code execution inside the browser's restricted security environment sandbox. An attacker can exploit this issue by enticing a user to visit a specially craft...
Google Chrome Microsoft Edge DoS
The vulnerability in the Sync component of Google Chrome and Microsoft Edge web browsers is related to improper use of memory after it has been freed. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by sending a specially crafted HTML page...
Google Chrome buffer error vulnerability
Google Chrome versions prior to 156.0.8078.47 contain a buffer error vulnerability. This vulnerability stems from memory corruption in the Sync component, which may allow remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...
Google Chrome Microsoft Edge Access Information Disclosure
The vulnerability in the Sync component of Google Chrome and Microsoft Edge web browsers is related to insufficient validation of input protected information. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information...
CVE-2026-109773: Uncontrolled Resource Consumption
Denial-of-service in the Sync component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...
CVE-2026-106222
An incorrect authorization flaw was found in the Sync component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/496623893...
CVE-2026-79013
An improper input validation flaw was found in the Sync component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513737209...
CVE-2026-79076
A flaw was found in chromium-browser. Improper input validation within the Sync component of Google Chrome allows a remote attacker to obtain sensitive information. This vulnerability can be exploited by sending specially crafted network traffic...
CVE-2026-79076
Improper input validation in Sync in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...
CVE-2026-79076
Improper input validation in Sync in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...
CVE-2026-79013
Improper input validation in Sync in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...
DEBIAN-CVE-2026-78964
Use after free in Sync in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-78964
Use after free in Sync in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-66089
Use after free in Sync in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-78964
Use after free in Sync in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79076
Improper input validation in Sync in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...
PT-2026-81575
Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 152.0.7977.65 Description A use after free issue exists in the Sync component. This occurs when a remote attacker lures a user to a crafted HTML page, potentially allowing the execution of arbitrary code...
CVE-2026-17918
An use after free flaw was found in the Sync component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513127137...
Linux Distros Unpatched Vulnerability : CVE-2025-11458
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap buffer overflow in Sync in Google Chrome prior to 141.0.7390.65 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...