Blink Router - Command Injection

Blink routers BL-WR9000 V2.4.9 , BL-AC2100AZ3 V1.0.4, BL-X10AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200AT1 v1.0.0, BL-X26AC8 v1.2.8, BLAC450MAE4 v4.0.0 and BL-X26DA3 v1.2.7 were discovered to contain a command injection vulnerability via the bsSetSSIDHide function. id: CVE-2025-45985 info: name: Blin...

brash

Brash Chromium Browser DoS Attack via document.title Exploitation Brash is a critical vulnerability in Blink , the rendering engine that powers Google's Chromium-based browsers. It allows any Chromium browser to collapse in 15-60 seconds by exploiting an architectural flaw in how certain DOM...

Astra Linux – Vulnerability in Chromium

The use of "after free" in Blink in Google Chrome before version 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

CVE-2026-2441-PoC

CVE-2026-2441-PoC PoC для CVE-2026-2441 PoC использования-after-free в Chrome CSS Blink CSSFontFeatureValuesMap PoC, вызывающий UAF при обработке CSS → RCE в рендерере внутри песочницы на Chrome =144.0.x все платформы. Триггер: @font-feature-values + container-query + принудительный пересчёт маке...

CVE-2026-2441-PoC

CVE-2026-2441 — Chrome CSSFontFeatureValuesMap Use-After-Free CVSS 8.8 High | Actively Exploited in the Wild | Renderer RCE Sandboxed A use-after-free vulnerability in Google Chrome's Blink CSS engine that allows a remote attacker to execute arbitrary code inside the browser sandbox via a crafted...

CVE-2026-2441-PoC

CVE-2026-2441 — Chrome CSSFontFeatureValuesMap Use-After-Free CVSS 8.8 High | Actively Exploited in the Wild | Renderer RCE Sandboxed A use-after-free vulnerability in Google Chrome's Blink CSS engine that allows a remote attacker to execute arbitrary code inside the browser sandbox via a crafted...

CVE-2026-2441

CVE-2026-2441 — Chrome CSSFontFeatureValuesMap Use-After-Free CVSS 8.8 High | Actively Exploited in the Wild | Renderer RCE Sandboxed A use-after-free vulnerability in Google Chrome's Blink CSS engine that allows a remote attacker to execute arbitrary code inside the browser sandbox via a crafted...

CLEANSTART-2024-ZJ67614 Use after free in Blink in Google Chrome prior to 89

Security vulnerability affects the chromium package. Use after free in Blink in Google Chrome prior to 89...

CLEANSTART-2024-QT19561 Use after free in Blink in Google Chrome on OS X prior to 90

Security vulnerability affects the chromium package. Use after free in Blink in Google Chrome on OS X prior to 90...

CLEANSTART-2024-PW77422 Use after free in Blink in Google Chrome prior to 90

Security vulnerability affects the chromium package. Use after free in Blink in Google Chrome prior to 90...

CLEANSTART-2024-LT27910 Use after free in Blink XSLT in Google Chrome prior to 91

Security vulnerability affects the chromium package. Use after free in Blink XSLT in Google Chrome prior to 91...

CLEANSTART-2024-YI46744 Chromium: CVE-2021-30620 Insufficient policy enforcement in Blink

Security vulnerability affects the chromium package. Chromium: CVE-2021-30620 Insufficient policy enforcement in Blink...

CLEANSTART-2024-HB07332 Chromium: CVE-2021-30617 Policy bypass in Blink

Security vulnerability affects the chromium package. Chromium: CVE-2021-30617 Policy bypass in Blink...

CLEANSTART-2024-OD41765 Chromium: CVE-2021-30606 Use after free in Blink

Security vulnerability affects the chromium package. Chromium: CVE-2021-30606 Use after free in Blink...

CLEANSTART-2024-UP21634 Inappropriate implementation in Blink in Google Chrome prior to 93

Security vulnerability affects the chromium package. Inappropriate implementation in Blink in Google Chrome prior to 93...

CLEANSTART-2024-BK55954 Type confusion in Blink layout in Google Chrome prior to 93

Security vulnerability affects the chromium package. Type confusion in Blink layout in Google Chrome prior to 93...

CLEANSTART-2024-DD11811 Insufficient data validation in Blink Editing in Google Chrome prior to 101

Security vulnerability affects the chromium package. Insufficient data validation in Blink Editing in Google Chrome prior to 101...

CentOS Linux 7 [TuxCare] Security Update: libxslt / libxslt-devel / libxslt-python (CENTOS7:CLSA-2024:1712176929)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2024:1712176929 advisory. - Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Blink in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Blink in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass the same-origin policy through a crafted HTML page. Chromium security severity: Medium...