53538 matches found
CVE-2026-113015
A flaw was found in chromium-browser. Due to improper memory handling a use-after-free condition within the Workers component, a remote attacker can execute arbitrary code inside the browser's sandbox environment. To exploit this vulnerability, the attacker must convince a user to load a speciall...
CVE-2026-113009
A flaw was found in Chromium's WindowControlsOverlay component. A remote attacker could trick a user into visiting a crafted HTML page to trigger a use-after-free memory condition. Successful exploitation allows the attacker to execute arbitrary code within the browser sandbox...
Linux Distros Unpatched Vulnerability : CVE-2026-112994
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML...
Linux Distros Unpatched Vulnerability : CVE-2026-113230
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox...
PT-2026-120600
The Authentication Endpoint accepts user-supplied input without sufficient encoding, allowing for the injection of malicious JavaScript payloads. This vulnerability can be triggered by submitting crafted input to the Authentication Endpoint. Successful exploitation allows an attacker to redirect...
Linux Distros Unpatched Vulnerability : CVE-2026-113127
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a...
CVE-2026-113095
A flaw was found in chromium-browser. An out-of-bounds read vulnerability in the Focus component allows a remote attacker to execute arbitrary code within the browser's restricted environment sandbox. By convincing a user to visit a specially crafted HTML page, an attacker can trigger this memory...
CVE-2026-113282
A flaw was found in the Views component of Google Chrome. A remote attacker could exploit this vulnerability by convincing a user to visit a specially crafted HTML page, triggering a use-after-free memory condition where previously released memory is improperly accessed. Successful exploitation...
CVE-2026-113058
A flaw was found in chromium-browser. A remote attacker can achieve arbitrary code execution within the browser sandbox by tricking a user into visiting a specially crafted HTML page. This issue is caused by a use-after-free vulnerability in the WebUI Web User Interface component, where the...
CVE-2026-113092
A flaw was found in Google Chrome. A use-after-free vulnerability in the Passwords component allows a remote attacker to execute arbitrary code inside the browser sandbox by convincing a user to open a crafted HTML page. Because the application attempts to access memory after it has been released...
CVE-2026-113329
A flaw was found in chromium-browser. An out-of-bounds read vulnerability in the installer component allows a remote attacker to read process memory inside the sandbox environment. By enticing a user to open a specially crafted HTML page, an attacker could exploit this flaw to disclose unauthoriz...
CVE-2026-113310
A flaw was found in chromium-browser. An out-of-bounds read vulnerability in the Bluetooth component allows a remote attacker to read memory within the sandbox by enticing a user to view a crafted HTML page. This issue leads to unauthorized information disclosure from within the sandboxed...
CVE-2026-113339
A flaw was found in chromium-browser. A remote attacker could achieve arbitrary code execution within the browser sandbox by convincing a user to open a specially crafted HTML page. This issue is caused by a use-after-free condition, where memory is improperly accessed after being released, durin...
CVE-2026-113311
A flaw was found in the chromium-browser ServiceWorker component. A remote attacker could exploit this flaw to execute arbitrary code within the browser sandbox by enticing a user to visit a specially crafted HTML page. This issue stems from a use-after-free memory corruption condition, which...
CVE-2026-113298
A flaw was found in the Transactions Platform component of Chromium. This vulnerability allows a remote attacker to execute arbitrary code within the browser sandbox. By persuading a user to visit a specially crafted HTML page, an attacker can trigger a use-after-free error, which occurs when...
CVE-2026-113293
An use after free flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/562040486...
CVE-2026-113287
A flaw was found in the Prompts component of chromium-browser. This use-after-free issue occurs when the application references memory after it has been released. A remote attacker could exploit this flaw by enticing a user to visit a specially crafted HTML page, potentially allowing arbitrary co...
CVE-2026-113261
A flaw was found in the WebAppInstalls component of the Chromium browser. This vulnerability allows a remote attacker to achieve arbitrary code execution outside the browser sandbox by convincing a user to view a specially crafted HTML page. The issue stems from a use-after-free condition, where...
CVE-2026-113256
A flaw was found in chromium-browser. A use-after-free vulnerability in the Permissions component allows a remote attacker to execute arbitrary code within the browser's sandbox. An attacker could exploit this flaw by enticing a user to visit a specially crafted HTML page...
CVE-2026-113203
A flaw was found in chromium-browser. A remote attacker could execute arbitrary code within the browser sandbox by convincing a user to visit a specially crafted HTML page. This vulnerability is caused by a use-after-free memory corruption issue in the Cascading Style Sheets CSS engine...