CVE-2026-85048-the-gpu-died

CVE-2026-85048 — viz surface UAF GPU process Another one that triggers a very difficult to use UAF. The BackupRefPtr will swat it. Also this being in the stage 2, you have to patch to see it happen. Re-entrancy in Surface::UpdateActivationDependencies stores a stale allocation-group pointer...

CVE-2025-56815

CVE-2025-56815 Datart 1.0.0-rc.3 is vulnerable to Directory Traversal in the POST /viz/image interface, since the server directly uses MultipartFile.transferTo to save the uploaded file to a path controllable by the user, and lacks strict verification of the filename. POST...

KLA91350 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Security vulnerability can be...

Viz component vulnerability Google Chrome Microsoft Edge

The Viz component vulnerability in Google Chrome and Microsoft Edge web browsers is related to authorization errors. Exploiting this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

CVE-2026-106185

An improper input validation flaw was found in the Viz component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/502462485...

Linux Distros Unpatched Vulnerability : CVE-2026-106185

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Viz in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system...

CVE-2026-106185

Improper input validation in Viz in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-106185

Improper input validation in Viz in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106185

Improper input validation in Viz in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106185

A medium-severity improper input validation vulnerability exists in the Viz component of Google Chrome prior to version 155.0.8059.39 . A remote attacker who has already compromised the renderer process can leverage a crafted HTML page to bypass system access restrictions . While the vulnerabilit...

CVE-2026-106185

Improper input validation in Viz in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106185

Improper input validation in Viz in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93690

Improper input validation in Viz in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106185: Improper Input Validation

Improper input validation in Viz in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

PT-2026-106860

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Improper input validation in Viz allows a remote attacker who has compromised the renderer process to bypass system access restrictions by using a crafted HTML page. Recommendations...

Astra Linux – Vulnerability in Chromium

Missing authorization in Viz in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

ROS-20260915-73-0128

The vulnerability of the Viz component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

Astra Linux – Vulnerability in Chromium

The use of after-free in Viz in Google Chrome before version 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...

Viz Component DoS

The vulnerability of the Viz component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

Chromium: CVE-2026-79116 Missing authorization in Viz

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...