1089 matches found
ChromSploit-Framework
ChromSploit Framework v3.0 Professional Security Research Platform for Browser Vulnerability Analysis Multi-CVE exploitation chains with advanced obfuscation, intelligent detection, and comprehensive analytics Overview ChromSploit Framework is a cutting-edge educational security research tool...
CVE-2022-4262
Exploit for CVE-2022-4262 Official Chromium bug report. Shoutout to @clem1 for finding the ITW exploit. Shoutout to @5aelo for his RCA on the bug. Shoutout to @bjrjk for his super indepth RCA on the bug. Shoutout to @alisaesage for her video on the bug...
CVE-2026-91708
A race condition flaw was found in the Network component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=553115724...
CVE-2026-92073
Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...
Chromium CVE-2026-87610: Incorrect authorization in Omnibox
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87479: Insufficient policy enforcement in Extensions
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
ROS-20260915-73-0046
The vulnerability of the ServiceWorker component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
PT-2026-91973
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 156 Thunderbird versions prior to 156 Description Incorrect boundary conditions exist within the DOM: Animation component. Recommendations Update Firefox to version 156. Update Thunderbird to version 156...
Astra Linux – Vulnerability in Firefox and Thunderbird
The Mozilla Fuzzing Team reported potential vulnerabilities in Thunderbird 91.10. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these vulnerabilities could have been exploited to execute arbitrary code. This vulnerability affects Firef...
Astra Linux – Vulnerability in Firefox and Thunderbird
If a user opens a specially crafted PDF file, the PDF reader may be tricked into leaking cross-origin information, when such information is served as chunked data. This vulnerability affects Firefox versions earlier than 85, Thunderbird versions earlier than 78.7, and Firefox ESR versions earlier...
Astra Linux – Vulnerability in Firefox
The browser might have mistakenly transferred the pointer lock state to another tab, which could lead to clickjacking attacks. This vulnerability affects Firefox versions earlier than 85...
Astra Linux – Vulnerability in Thunderbird, Firefox
Regular expressions used to filter out forbidden properties and values from style directives in calls to console.log did not account for external URLs. As a result, data could potentially be exfiltrated from the browser. This vulnerability affects Firefox 109, Firefox ESR 102.7, and Thunderbird...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in Compositing in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially spoof the contents of the Omnibox URL bar via a crafted HTML page...
ROS-20260914-73-0127
The vulnerability of the Codecs components in Google Chrome and Microsoft Edge relates to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created video file...
CVE-2026-87635
creationtimestamp| type| source ---|---|--- 2026-09-10 04:45:16+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260910 2026-09-16 04:45:50+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260916...
CVE-2026-87531
Information leak in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
GHSA-H34P-XGVR-MFG3 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-PR6F-VR87-8X7H vulnerabilities
Vulnerabilities for packages: chromium...