CVE-2026-14382

CVE-2026-14382 Bin 触发器 Bug 修复 $250000492218546 High CVE-2026-14382: Insufficient validation of untrusted input in ANGLE. Reported by anonymous on 2026-03-13 此漏洞的根本原因似乎与 CVE-2025-6558 相似。基于我目前的分析，我怀疑它可能是 CVE-2025-6558 的一个变体。因此，我改编了 CVE-2025-6558 的 PoC，并创建了以下文件： poc.c 是主要的 PoC，但仅适用于 32 位环境。与原始...

CVE-2025-6558-exp

CVE-2025-6558 - Escape de Sandbox de ANGLE/GPU de Google Chrome Campo| Detalles ---|--- ID de CVE| CVE-2025-6558 Tipo de Vulnerabilidad| Escape de Sandbox Aplicación Afectada| Google Chrome componentes ANGLE y GPU Severidad| Crítica – Permite ejecución remota de código arbitrario y acceso a...

WebKit-UAF-ANGLE-OOB-Analysis

WebKit-UAF-ANGLE-OOB-Analysis CVE-2025-43529, CVE-2025-14174 关于 iOS 26.1 上 WebKit/ANGLE 链的笔记与 PoC 材料。这不是一个完整的漏洞利用；它将已验证的原语与仍然失败的部分区分开来。 作者： zeroxjf 基于： jir4vv1t 的 CVE-2025-43529 漏洞利用 状态： 部分链；任意读/写尚未证实 测试设备： iPhone 11 Pro Max，iOS 26.1 最后更新： 2026 年 1 月 范围与致谢 CVE-2025-43529 的 UAF 触发、butterfly 回收以及...

CVE-2025-14174-Poc

CVE-2025-14174 PoC 漏洞利用程序 概述 本仓库包含一个功能完整的 CVE-2025-14174（也记为 EUVD-2025-203113）概念验证（PoC）漏洞利用程序，该漏洞是 ANGLE 图形引擎中的一个严重内存损坏漏洞。其根本原因在于对内存缓冲区边界内操作的限制不当（CWE-119），使得通过特制的网页内容能够进行越界内存访问。 该漏洞利用程序针对网络浏览器，主要聚焦于 iOS 设备（最高至 iOS 26），但已在多种使用 ANGLE 的平台上测试并确认有效，包括基于 Chrome、Edge 和 Safari 的 Android、Windows 和 macOS...

CTT-Apple-Silicon-Refraction

CTT-Apple-Silicon-Refraction webkitrefraction.js The 33-Layer WebGL Payload ​这个JavaScript有效载荷使用 \alpha 常量来创建一个高频的"Memory Shiver"。它通过在WebKit垃圾回收器与GPU的Metal命令缓冲区之间制造不同步，触发CVE-2025-43529中的Use-After-Free（UAF）漏洞。 🍎 CTT-Apple-Silicon-Refraction WebKit/ANGLE 零日 "标签保护地址；CTT控制时间。" CVE-ID: CVE-2025-14174...

CVE-2026-95350

A flaw was found in the ANGLE Almost Native Graphics Layer Engine component of Chromium. A remote attacker could exploit this buffer overflow vulnerability by enticing a user to visit a specially crafted HTML page. Successful exploitation allows the attacker to execute arbitrary code outside the...

RLSA-2026:74084 Critical: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia CVE-2023-4860 chromium-browser: angle: Out of bounds memory access in ANGLE CVE-2024-7532 chromium-browser:...

webkit2gtk3 security update

An update is available for webkit2gtk3. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list WebKitGTK is the port of the portable web rendering engine WebKit to the...

Linux Distros Unpatched Vulnerability : CVE-2026-102313

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a crafted...

Linux Distros Unpatched Vulnerability : CVE-2026-102331

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to potentially execute arbitrary code outside the sandb...

chromium-browser: angle: Out of bounds write in ANGLE

An out of bounds write flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=503768143...

chromium-browser: angle: Uninitialized Use in ANGLE

An uninitialized use flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=500524833...

chromium-browser: angle: Out of bounds read in ANGLE

An out of bounds read flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=500530720...

chromium-browser: angle: Uninitialized Use in ANGLE

An uninitialized use flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513920082...

chromium-browser: angle: Use after free in ANGLE

An use after free flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=496445460...

chromium-browser: angle: Out of bounds write in ANGLE

An out of bounds write flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=497637277...

chromium-browser: angle: Heap buffer overflow in ANGLE

A heap buffer overflow flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=500063836...

chromium-browser: angle: Use after free in ANGLE

An use after free flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=500540958...

chromium-browser: angle: chromium-browser: Inappropriate implementation in ANGLE

An inappropriate implementation flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=500052361...

chromium-browser: angle: Out of bounds write in ANGLE

An out of bounds write flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=500080303...