CVE-2026-84333

Use after free in Dawn in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-84347

Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-84350

Use after free in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: Low...

CVE-2026-84350

Use after free in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: Low...

DEBIAN-CVE-2026-84324

Use after free in Proxy in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: High...

CVE-2026-84324

Use after free in Proxy in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: High...

CVE-2026-84347

A flaw was found in WebRTC, a component of Google Chrome. This use-after-free vulnerability allows a remote attacker to execute arbitrary code within the browser's sandbox. Exploitation occurs when a user visits a specially crafted HTML page, leading to potential compromise of the affected system...

CVE-2026-84349

An use after free flaw was found in the Browser component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=537105664...

Security update for c-ares (important)

openSUSE security update: security update for c-ares ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21721-1 Rating: important References: bsc1270416 bsc1276290 bsc1276291 Cross-References: CVE-2026-33630 CVE-2026-69184 CVE-2026-69186 CVSS scores:...

Microsoft Windows Cloud Files Mini Filter Driver CldiStreamCompleteRequest use-after-free vulnerability

Summary A use-after-free vulnerability exists in the CldiStreamCompleteRequest functionality of Windows Cloud Files Mini Filter Driver versions: 10.0.26100.8457 WinBuild.160101.0800. A specially crafted sequence of Cloud Filter API calls can lead to privilege escalation. An attacker can execute a...

uafuzz

UAFuzz：针对释放后使用漏洞的二进制级定向模糊测试 定向灰盒模糊测试 （DGF）如 AFLGo 旨在对预先选定的潜在易受攻击目标位置进行压力测试，适用于不同的安全场景：（1）漏洞复现，（2）补丁测试或（3）静态分析报告验证。近期有更多研究工作提升了定向模糊测试的有效性和效率（参见 awesome-directed-fuzzing）。 我们提出 UAFuzz ，这是一个 专注于二进制级释放后使用（UAF）漏洞的定向模糊器 ，通过精心调整定向模糊测试的关键组件，以适应此类漏洞的具体特征。UAF 漏洞在堆元素被释放后被使用时出现。检测 UAF 漏洞很困难：（1）复杂性...

CVE-2022-22620

CVE-2022-22620 - "Zombie" Use-after-free en Safari Exploit de fuga de información: filtra una dirección de un JSObject Probado en webkitgtk-2.34.3 UBUNTU64 : https://webkitgtk.org/releases/webkitgtk-2.34.3.tar.xz PoC original por Google Project Zero:...

CVE-2026-84350

Use after free in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: Low...

CVE-2026-84350

CVE-2026-84350 is a use-after-free in the TabStrip component of Google Chrome prior to 152.0.7977.75 . A remote attacker leveraging social engineering can trigger the flaw via UI interaction to execute arbitrary code outside the browser sandbox. Chromium rates the severity as Low , while the assi...

CVE-2026-84350

Use after free in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: Low...

CVE-2026-84333

Use after free in Dawn in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-84347

Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-84333

CVE-2026-84333 is a use-after-free vulnerability in Dawn , a graphics abstraction component of Google Chrome , affecting versions prior to 152.0.7977.75 on Android (and 152.0.7977.76 on Windows/Mac). A remote attacker can execute arbitrary code outside the sandbox by serving a crafted HTML page, ...

CVE-2026-84333

Use after free in Dawn in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-84347

Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...