CVE-2025-24201-WebKit-Vulnerability-Detector-PoC-

CVE-2025-24201 WebKit 취약점 탐지기 PoC 이 PoCproof-of-concept는 WebKit 기반 브라우저가 CVE‑2025‑24201 , 즉 WebGL 구현의 잘못된 기능 검증으로 인해 발생하는 고심각도 범위를 벗어난 쓰기out-of-bounds write 취약점 에 취약한지 여부를 탐지합니다. 🔍 취약점 요약 CVE‑2025‑24201은 WebGLRenderingContextWebGL 1가 GLINVALIDOPERATION 또는 GLINVALIDENUM 오류를 생성하지 않고 WebGL 2에서만 유효한...

CVE-2022-22629

CVE-2022-22629 개념 증명 이 글은 Safari 15.4 보안 업데이트에서 패치된 WebGL 버그의 PoC에 관한 것입니다. WebGL이 어떻게 작동하는지 자세히 배우고 싶다면 이 공식 리소스를 사용할 수 있습니다. 여기서는 버그 관련 세부 사항에 대해 논의할 것이기 때문입니다: https://webglfundamentals.org/webgl/lessons/webgl-how-it-works.html 이 PoC는 이 버그를 악용하기 위한 프리미티브를 얻는 방법에 관한 것이 아닙니다. 단지 취약점 분석과 웹 콘텐츠를...

CVE-2026-79215

CVE-2026-79215 is an integer overflow in the WebGL component of Google Chrome prior to version 152.0.7977.65 . A remote attacker can potentially execute arbitrary code outside the sandbox by luring a victim into loading a crafted HTML page. Chromium rates the security severity as Medium . Remedia...

CVE-2026-79235

A use after free vulnerability in the WebGL component of Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox by crafting a malicious HTML page. The Chromium security team classified this as High severity. The fix is included in Chro...

CVE-2026-79235

Use after free in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-78948

CVE-2026-78948 is a buffer overflow in WebGL affecting Google Chrome prior to 152.0.7977.65 . A remote attacker can leverage a crafted HTML page to execute arbitrary code outside the sandbox , representing a significant escalation from typical in-browser exploits. Chromium rates the severity as H...

CTT-Apple-Silicon-Refraction

CTT-Apple-Silicon-Refraction webkitrefraction.js 33層のWebGLペイロード このJavaScriptペイロードは、\alpha定数を使用して高周波の「メモリシーバー」を生成します。これにより、WebKitのガベージコレクタとGPUのMetalコマンドバッファを非同期化させ、CVE-2025-43529のUse-After-Free UAF を誘発します。 🍎 CTT-Apple-Silicon-Refraction WebKit/ANGLE ゼロデイ 「タグはアドレスを守り、CTTは時間を制御する」 CVE-ID:...

firefox: thunderbird: Site isolation issue in the Graphics: CanvasWebGL component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the Graphics: CanvasWebGL component...

what-you-reveal

╦ ╦╦ ╦╔═╗╔╦╗ ╦ ╦╔═╗╦ ╦ ╦═╗╔═╗╦ ╦╔═╗╔═╗╦ ║║║╠═╣╠═╣ ║ ╚╦╝║ ║║ ║ ╠╦╝║╣ ╚╗╔╝║╣ ╠═╣║ ╚╩╝╩ ╩╩ ╩ ╩ ╩ ╚═╝╚═╝ ╩╚═╚═╝ ╚╝ ╚═╝╩ ╩╩═╝ ИНСТРУМЕНТ АНАЛИЗА СИСТЕМЫ // ДЕМОНСТРАЦИЯ ОТПЕЧАТКА БРАУЗЕРА What You Reveal — это инструмент анализа конфиденциальности, предназначенный для демонстрации того, какую именно...

Fedora 44 : chromium (2026-295354c8a1)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-295354c8a1 advisory. chromium security release 151.0.7922.169 CVE-2026-76034: Buffer overflow in WebGL CVE-2026-76036: Buffer overflow in Dawn CVE-2026-76033:...

Chromium: CVE-2026-76045 Use after free in WebGL

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-76034 Buffer overflow in WebGL

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

SUSE CVE-2026-76034

Buffer overflow in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

SUSE CVE-2026-76045

Use after free in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

Microsoft Edge (Chromium) < 151.0.4129.101 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 151.0.4129.101. It is, therefore, affected by multiple vulnerabilities as referenced in the August 20, 2026 advisory. - Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute...

Security update for chromium (critical)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2026:0293-1 Rating: critical References: 1274759 1275706 Cross-References: CVE-2026-76033 CVE-2026-76034 CVE-2026-76035 CVE-2026-76036 CVE-2026-76037 CVE-2026-76038 CVE-2026-76039 CVE-2026-76040 CVE-2026-76041...

CVE-2026-9999-exploit

CVE-2026-9999 — Chrome ANGLE/Metal WebGL PoC 헌팅 하네스 macOS 1. 취약점 요약...

CVE-2026-76045

A flaw was found in WebGL in Google Chrome. This use-after-free vulnerability allows a remote attacker to execute arbitrary code within the browser's sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page, leading to a high-severity security risk...

Update Chrome now: Two critical vulnerabilities fixed

Chrome is rolling out an update for its desktop versions. The update includes 15 security fixes, two of which address critical buffer overflow vulnerabilities. The stable channel has been updated to 151.0.7922.169/.170 for Windows and Mac, and 151.0.7922.169 for Linux. How to update Chrome If you...

CVE-2026-76034

A flaw was found in Chromium's WebGL component. A remote attacker could exploit a buffer overflow vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to arbitrary code execution outside the sandbox, allowing the attacker to gain control over the affected syste...