724 matches found
CVE-2026-43700
CVE-2026-43700 WebKit WebGPU importExternalTexture cross-origin information leak. Safari Red/Green/Blue/White Fixed version = 26.5.2: PATCHED importExternalTexture blocked: SecurityError Principle GPUDevice.importExternalTexturesource: HTMLVideoElement imports a video into a GPU-samplable . Befor...
on-device-browser-agent
Local Browser - On-Device AI Web Automation Launching support for runanywhere-web-sdk soon in our main repo: please go check it out: https://github.com/RunanywhereAI/runanywhere-sdks A Chrome extension that uses WebLLM to run AI-powered web automation entirely on-device. No cloud APIs, no API key...
CVE-2026-5281
⚡ CVE-2026-5281 - Chrome Dawn WebGPU Use-After-Free 이 취약점은 우리가 서비스를 제공하는 고객 중 하나에 영향을 미쳤습니다. 이 저장소는 원래 연구에 대한 우리의 기여입니다. 그룹을 위한 중앙 집중식 출발점으로, 이 구성 요소에 영향을 미치는 유사한 취약점이 다시 나타나면 이미 기반이 마련되어 있도록 합니다. 이 저장소는 버그 뒤에 있는 이론, 원래 연구자의 연구 결과에 대한 문서화된 요약, 그리고 실험실 환경에서 노출을 확인하는 실용적인 도구 세트를 한곳에 모아 놓습니다. 참고: 이...
CVE-2026-5281-Research-Toolkit
CVE-2026-5281 研究工具包 Chrome WebGPU 释放后使用（CWE-416） 本工具包用于围绕 CVE-2026-5281 进行安全研究和防御性验证。 已修补的 Chrome 版本：146.0.7680.178 可能存在漏洞的版本：低于 146.0.7680.178 的任何版本 文件 cve20265281scanner.py 用于本机检查、机群 CSV 检查和日志分类的统一扫描器。 cve20265281exploit.py PoC 工件生成器（为实验室测试创建 HTML/JSON/JS 等文件）。 环境要求 Windows PowerShell 或终端 Pytho...
Updated firefox & nss packages fix security vulnerabilities
Sandbox escape in the Remote Settings Client component. CVE-2026-75874 Privilege escalation in the DOM: Workers component. CVE-2026-16365 Use-after-free in the JavaScript: GC component. CVE-2026-84118 Sandbox escape due to use-after-free in the DOM: Navigation component. CVE-2026-84119...
cve-2026-13934
CVE-2026-13934 作業プロジェクトのリポジトリです。調査・分析・作業・報告書を1つのリポジトリで 扱います（D088/D091）。 このファイルはリポジトリ・ボードの入口ドキュメント です。フォルダ・成果物の規約全文は docs/conventions.md を参照してください。 本文（現状・結論・リンク）はレポート（report）項目が昇格したときに更新します。 調査・分析・作業エージェントはルートREADMEを修正しません。 一行まとめ : Google ChromeのWebGPU実装Dawn がYCbCrサンプラー生成時にVulkan仕様が...
CVE-2026-2828-WebGPU-Cross-Origin-Pixel-Stealing-via-Timing
4. CVE-2026-2828 – WebGPU 타이밍 기반 교차 출처 픽셀 탈취 개요 악성 웹사이트는 WebGPU 컴퓨트 셰이더 타이밍을 사용하여 교차 출처 iframe의 렌더링 시간을 측정하고, 민감한 콘텐츠예: 은행 정보의 픽셀 값을 복구합니다. 심각도: 높음 정보 공개 데모 HTML/JS 단일 파일 root@kitploit: CVE-2026-2828 PoC WebGPU Side-Channel Leak The iframe below contains a secret code that we will leak...
CVE-2026-9034
Use After Free vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via WebGL or WebGPU, to access already freed...
CVE-2026-11891
Use After Free vulnerability in Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via WebGL or WebGPU, to access already freed memory. This issue affects Valhall GP...
EUVD-2026-72801
Use After Free vulnerability in Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via WebGL or WebGPU, to access already freed memory. This issue affects Valhall GP...
CVE-2026-11891
CVE-2026-11891 is a Use After Free vulnerability in the Arm Valhall GPU Userspace Driver and Arm 5th Gen GPU Architecture Userspace Driver , affecting versions r46p0 through r55p0 (specifically r46p0–r49p5, r50p0–r54p3, and r55p0). A non-privileged user process can trigger the bug by performing v...
CVE-2026-11891 Mali GPU Userspace Driver allows access to already freed memory
Use After Free vulnerability in Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via WebGL or WebGPU, to access already freed memory. This issue affects Valhall GP...
EUVD-2026-72799
Use After Free vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via WebGL or WebGPU, to access already freed...
CVE-2026-9034 Mali GPU Userspace Driver allows access to already freed memory
Use After Free vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via WebGL or WebGPU, to access already freed...
rendering-code-outside-the-sandbox-cve-2026-76036-dawn-webgpu-buffer-overflow-in-chrome-on-android
CVE-2026-76036 — DawnWebGPU NPOT 깊이/스텐실 밉맵 탐지 하네스 DawnChromium의 WebGPU 구현 및 Android용 Google Chrome 151.0.7922.169 이전 버전stable 151, 2026-08-18 출시에서 치명적인CVSS 9.6, CWE-122 힙 버퍼 오버플로가 발생합니다. Dawn 수정 커밋 178fb7048ad3에 따른 근본 원인: PowerVR 독점 Vulkan 드라이버가 2의 거듭제곱이 아닌NPOT 깊이/스텐실 텍스처의 밉 레벨 크기를 잘못 계산합니다. 영향받는...
SUSE CVE-2026-84123
Privilege escalation due to use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...
SUSE CVE-2026-84130
Information disclosure in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...
Linux Distros Unpatched Vulnerability : CVE-2026-84130
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information disclosure in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...