EUVD-2026-89384

Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-102299

Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-102299

A type confusion flaw was identified in the V8 component of Google Chrome prior to version 154.0.8037.92 . This vulnerability could allow a remote attacker to execute arbitrary code inside the sandbox by viewing a crafted HTML page . Remediation is available in Chrome version 154.0.8037.92 for Wi...

CVE-2026-102331

A buffer overflow vulnerability in the ANGLE component of Google Chrome on Android (prior to version 154.0.8037.92 ) allows a remote attacker to potentially execute arbitrary code outside the sandbox . The attack can be initiated through a crafted HTML page . Exploitation details are not provided...

EUVD-2026-89373

Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-76732

A local privilege-escalation vulnerability exists in a daemon of HPE Networking Instant ON . If successful, a local attacker could achieve arbitrary code execution with root privileges , provided that certain preconditions outside of the attacker's control are met. No specific exploit details or ...

EUVD-2026-89340

Buffer overflow vulnerability exists in the affected interface of HPE Networking Instant ON that could allow an unauthenticated remote attacker to run arbitrary code on the underlying host. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the...

CVE-2026-95286

A flaw was found in chromium-browser. A type confusion vulnerability—where data is processed using an incompatible data type—exists in the browser's Bindings component. A remote attacker can exploit this flaw by enticing a user to view a specially crafted HTML page, leading to arbitrary code...

CVE-2026-97475

A flaw was found in the Linux kernel's Tegra SOCTHERM driver. When the driver is removed, registered cooling devices are not unregistered from the thermal framework, leaving stale references to memory that has already been released. This leads to a use-after-free vulnerability, where the system...

CVE-2026-95325

A flaw was found in the ANGLE component of chromium-browser. This vulnerability allows a remote attacker to execute arbitrary code outside the sandbox by convincing a user to visit a specially crafted HTML page. The issue stems from a use-after-free condition, which occurs when memory is referenc...

CVE-2026-95372

A flaw was found in the Chromecast component of chromium-browser. This vulnerability can lead to arbitrary code execution outside the browser's security sandbox. A remote attacker who has already compromised the renderer process could trigger a use-after-free memory flaw by convincing a user to...

CVE-2026-95338

A flaw was found in chromium-browser. A remote attacker can execute arbitrary code within the browser's sandbox by convincing a user to open a specially crafted PDF document. This issue is caused by a use-after-free vulnerability in the PDFium component, where memory is improperly accessed after ...

CVE-2026-95348

A flaw was found in chromium-browser. A use-after-free memory corruption issue exists within the Bluetooth component. A remote attacker who has already compromised the renderer process could exploit this vulnerability by convincing a user to load a crafted HTML page. Successful exploitation could...

CVE-2026-95373

Use after free in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-95381

Improper input validation in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95353

Use after free in Bindings in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95341

Improper input validation in Desktop in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Medium...

CVE-2026-95306

Type confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-95281

Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-95274

Improper output encoding in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...