cve-2026-40369-exploit

This references https://voidsec.com/cve-2026-40369-browser-sandbox-escape/, the approach differs significantly from https://github.com/orinimron123/CVE-2026-40369-EXPLOIT, and since I didn't see any public exp from them, I documented it...

CVE-2026-113142

A flaw was found in the Extensions component of Chromium. This vulnerability allows a remote attacker to cause information disclosure by reading process memory inside the browser sandbox. To exploit the flaw, an attacker must convince a user to load a specially crafted HTML page, triggering memor...

CVE-2026-113209

A flaw was found in the Navigation component of Google Chrome. A remote attacker can exploit a memory corruption vulnerability by convincing a user to open a specially crafted HTML page, leading to information disclosure. A successful attack enables the adversary to read sensitive memory contents...

CVE-2026-113331

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to potentially execute arbitrary code inside the browser sandbox by enticing a user to visit a crafted HTML page. The issue stems from memory corruption within the browser's Controls component...

CVE-2026-113306

A flaw was found in Chromium's Network component. A remote attacker could exploit improper input validation by enticing a user to visit a specially crafted HTML page. Successful exploitation may allow the attacker to execute arbitrary code within the browser's sandbox, an isolated execution...

CVE-2026-113318

A flaw was found in chromium-browser. A remote attacker could exploit a memory corruption issue in the ServiceWorker component by convincing a user to visit a specially crafted HTML page. Successful exploitation allows the attacker to execute arbitrary code within the browser's sandbox environmen...

CVE-2026-113313

A flaw was found in the DevTools component of Chromium. A remote attacker could exploit this memory corruption vulnerability by convincing a user to open a specially crafted HTML page. Successful exploitation could allow the attacker to execute arbitrary code within the isolated browser sandbox...

CVE-2026-113303

A flaw was found in the Web Real-Time Communication WebRTC component of chromium-browser. This memory corruption vulnerability allows a remote attacker to achieve arbitrary code execution inside the browser sandbox by convincing a user to visit a specially crafted HTML page...

CVE-2026-113316

A flaw was found in the Views component of chromium-browser. Due to improper input validation, a remote attacker could execute arbitrary code within the browser sandbox environment by convincing a user to visit a specially crafted HTML page...

CVE-2026-113292

A flaw was found in Google Chrome's Omnibox component. A remote attacker could achieve arbitrary code execution within the browser's sandbox an isolated security environment by convincing a user to visit a specially crafted HTML page. This vulnerability stems from improper input validation when...

CVE-2026-113301

A flaw was found in the WebAppInstalls component of Google Chrome. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page, triggering memory corruption. This issue could allow the attacker to execute arbitrary code within the browser's...

CVE-2026-113280

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to achieve arbitrary code execution inside the browser sandbox by convincing a user to visit a specially crafted HTML page. The issue stems from a memory corruption condition within the Paint rendering component...

CVE-2026-113289

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to potentially execute arbitrary code inside the browser sandbox by convincing a user to visit a crafted HTML page. The issue stems from improper input validation within the PerformanceAPIs component...

CVE-2026-113276

A flaw was found in chromium-browser. A remote attacker could execute arbitrary code within the browser sandbox by convincing a user to visit a specially crafted HTML page. This issue stems from a memory corruption vulnerability within the Passwords component...

CVE-2026-113272

A flaw was found in the Extensions component of chromium-browser. This vulnerability allows a remote attacker to achieve arbitrary code execution within the browser sandbox. By convincing a user to visit a specially crafted HTML page, an attacker can trigger memory corruption to execute untrusted...

CVE-2026-113268

A flaw was found in chromium-browser. A memory corruption vulnerability exists in the Navigation component when processing web content. A remote attacker could exploit this flaw by enticing a user to visit a crafted HTML page, potentially allowing arbitrary code execution within the browser sandb...

CVE-2026-113267

A flaw was found in the Chromium Video component. A remote attacker could execute arbitrary code within the restricted browser sandbox by convincing a user to open a specially crafted HTML page. This vulnerability is caused by a memory corruption flaw that occurs when processing video content...

CVE-2026-113248

A flaw was found in chromium-browser. This issue is caused by a memory corruption vulnerability in the FileSystem component. By convincing a user to visit a specially crafted HTML page, a remote attacker could potentially execute arbitrary code inside the browser sandbox...

CVE-2026-113258

A flaw was found in the Chromoting remote desktop component of chromium-browser. A remote attacker could exploit this memory corruption issue by convincing a user to open a specially crafted HTML page. Successful exploitation could allow the attacker to execute arbitrary code within the isolated...

CVE-2026-113243

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to achieve arbitrary code execution inside the browser sandbox by tricking a user into loading a crafted HTML page. The flaw is caused by a memory corruption error during Document Object Model DOM processing...