PT-2026-85235

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.82 Description A type confusion flaw exists in V8, the open-source JavaScript and WebAssembly engine used by Google Chrome. This issue allows a remote attacker to execute arbitrary code within the...

Stable Channel Update for Desktop

The Stable channel has been updated to 152.0.7977.82/.83 for Windows and Mac and 152.0.7977.82 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security Fixes and Rewards Note: Access to bug details and links may be kept...

Linux Distros Unpatched Vulnerability : CVE-2026-84347

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-84358

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper privilege management in Downloads in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to spoof...

CVE-2026-2441-PoC

CVE-2026-2441-PoC CVE-2026-2441 PoC Chrome CSS 释放后使用（Use-After-Free）PoC（Blink CSSFontFeatureValuesMap） 触发 CSS 处理中的 UAF → 在 Chrome =144.0.x（所有平台）的沙箱内实现渲染器 RCE 的 PoC。 触发方式： @font-feature-values + container-query + 通过 rAF 循环中的 offsetWidth 强制布局重算 → 迭代器失效，在 CSSValue 仍被引用时将其释放。 利用链摘要： CSSOM 布局（grooming...

CVE-2025-14765-and-CVE-2025-14766

Laboratorio Interactivo de Vulnerabilidades de Chrome Resumen Este laboratorio educativo interactivo simula dos vulnerabilidades críticas de Chrome CVE-2025-14765 y CVE-2025-14766 en un entorno seguro y controlado. La herramienta visualiza conceptos de corrupción de memoria sin ejecutar exploits...

Chromium-941743

Chrome 73.0.3683.86 exploit estable para el problema 941743 de chromium, probado en Windows 10 x64. inicia Chrome con el argumento --no-sandbox navega a exp.html y comienza el exploit presionando el botón...

CVE-2026-2441

Google Chrome CSS 远程代码执行漏洞（CVE-2026-2441） 概述 已识别出一个高危漏洞，编号为 CVE-2026-2441，归类于 CWE-416、CWE-416（CVSS 8.8）。在 Google Chrome 145.0.7632.75 之前版本中，CSS 存在释放后使用漏洞，允许远程攻击者通过精心构造的 HTML 页面在沙箱内执行任意代码。（Chromium 安全等级：高危） 详情 CVE 编号 ：CVE-2026-2441 发现日期 ：2026-02-13 发布日期 ：2026-02-13 影响范围 ：机密性、完整性、可用性 漏洞利用可用性...

NetSec-CVE-2023-4357

网络安全项目 — CVE-2023-4357 概述 本项目是网络安全课程的期末项目。 该项目聚焦于 CVE-2023-4357，这是一个影响 116.0.5845.96 之前版本的 Google Chrome 的漏洞。该漏洞与 XML/XSLT 的处理有关，可能允许恶意文档绕过预期的文件访问限制。 复现 我在虚拟机中使用旧版 Google Chrome 复现了该漏洞，并分析了 XML 文档如何触发这一易受攻击的行为。 所提供的 XML/SVG 文件用于复现该漏洞，并演示对 /etc/passwd 的未授权访问。 环境 VirtualBox Google Chrome...

Chrome-CVE-2024-2887-RCE-POC

Chrome-CVE-2024-2887-RCE-Poc概述 漏洞名称：Google Chrome Type Confusion 威胁类型：代码执行 利用可能性：高 POC状态：已公开 在野利用状态：未公开 EXP状态：已公开 技术细节状态：已公开 This can be considered a variant bug of CVE-2024-2887 discovered by Manfred Paul and presented in Vancouver 2024. 注明 Poc和Exp均来自互联网，仅供交流学习使用，请在虚拟机内测试 Pwned by Seunghyun Lee...

SUSE CVE-2026-84323

Missing authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-84324

Use after free in Proxy in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: High...

SUSE CVE-2026-84326

Uninitialized resource in V8 in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-84327

Incorrect authorization in Autofill in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

SUSE CVE-2026-84328

Missing authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-84329

Confused deputy in CredentialProvider in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to leak sensitive information via a crafted HTML page. Chromium security severity: Low...

SUSE CVE-2026-84330

UI misrepresentation in FullScreen in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-84331

Incorrect authorization in Actor in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

SUSE CVE-2026-84332

Incorrect authorization in SiteSettings in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-84333

Use after free in Dawn in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...