brash

Brash Ataque DoS al Navegador Chromium mediante la explotación de document.title Brash es una vulnerabilidad crítica en Blink , el motor de renderizado que impulsa los navegadores basados en Chromium de Google. Permite que cualquier navegador Chromium colapse en 15-60 segundos al explotar una fal...

Blink Router - Command Injection

Blink routers BL-WR9000 V2.4.9 , BL-AC2100AZ3 V1.0.4, BL-X10AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200AT1 v1.0.0, BL-X26AC8 v1.2.8, BLAC450MAE4 v4.0.0 and BL-X26DA3 v1.2.7 were discovered to contain a command injection vulnerability via the bsSetSSIDHide function. id: CVE-2025-45985 info: name: Blin...

GHSA-V79C-CCH6-3849 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-84MV-VQ26-WVMX vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-2441-PoC

CVE-2026-2441 — Chrome CSSFontFeatureValuesMap Use-After-Free CVSS 8.8 High | Actively Exploited in the Wild | Renderer RCE Sandboxed A use-after-free vulnerability in Google Chrome's Blink CSS engine that allows a remote attacker to execute arbitrary code inside the browser sandbox via a crafted...

CVE-2026-2441-PoC

CVE-2026-2441 — Chrome CSSFontFeatureValuesMap Use-After-Free CVSS 8.8 High | Actively Exploited in the Wild | Renderer RCE Sandboxed A use-after-free vulnerability in Google Chrome's Blink CSS engine that allows a remote attacker to execute arbitrary code inside the browser sandbox via a crafted...

CVE-2026-2441-PoC

CVE-2026-2441-PoC CVE-2026-2441 PoC Chrome CSS Use-After-Free PoC Blink CSSFontFeatureValuesMap PoC triggering UAF in CSS processing → renderer RCE inside sandbox on Chrome =144.0.x all platforms. Trigger: @font-feature-values + container-query + forced layout recalc via offsetWidth in rAF loop →...

CVE-2026-2441

CVE-2026-2441 — Use-After-Free en Chrome CSSFontFeatureValuesMap CVSS 8.8 Alto | Explotado activamente en la naturaleza | RCE del Renderer Sandboxeado Una vulnerabilidad de use-after-free en el motor CSS Blink de Google Chrome que permite a un atacante remoto ejecutar código arbitrario dentro del...

OPENSUSE-SU-2026:21498-1 Security update for chromium

This update for chromium fixes the following issues: Changes in chromium: - Chromium 150.0.7871.186 boo1272460: CVE-2026-16807: Out of bounds write in Codecs CVE-2026-16806: Use after free in WebMCP CVE-2026-16805: Use after free in Blink CVE-2026-16804: Use after free in Input - Chromium...

Chromium: CVE-2026-79216 Buffer overflow in Blink

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-79216

A flaw was found in Blink, a rendering engine used in Google Chrome. A remote attacker, who has already compromised the renderer process, could exploit a buffer overflow vulnerability by crafting a malicious HTML page. This could lead to the execution of arbitrary code within the browser's sandbo...

Linux Distros Unpatched Vulnerability : CVE-2026-79216

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in Blink in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code...

DEBIAN-CVE-2026-79216

Buffer overflow in Blink in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79216

Buffer overflow in Blink in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79216

A buffer overflow in the Blink engine of Google Chrome prior to version 152.0.7977.65 allows a remote attacker who has already compromised the renderer process to execute arbitrary code inside the sandbox via a crafted HTML page. The vulnerability is rated Medium by Chromium and scores 7.5 (High)...

CVE-2026-79216

Buffer overflow in Blink in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79216

Buffer overflow in Blink in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

PT-2026-81776

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A buffer overflow exists in Blink, the rendering engine used by the browser. A remote attacker who has already compromised the renderer process can execute arbitrary code within the...

Astra Linux – Vulnerability in Chromium

In the Blink Serial API in Google Chrome, a memory access out of bounds was allowed before version 97.0.4692.71. This allowed a remote attacker to perform a memory read through a crafted HTML page and a virtual serial port driver...

Astra Linux – Vulnerability in Chromium

Before version 90.0.4430.72, using Blink with Google Chrome on OS X allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...