CVE-2026-84354

Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-84352

CVE-2026-84352 is a critical use-after-free vulnerability in WebGL in Google Chrome (prior to 152.0.7977.75 on Android), allowing a remote attacker to execute arbitrary code outside the browser sandbox via a crafted HTML page. The CVSS 3.1 score is 9.6 (AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). The b...

CVE-2026-84352

Use after free in WebGL in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-84354

Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-84352

Use after free in WebGL in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-84353

Use after free in Shared Tab Groups in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-84353

CVE-2026-84353 is a critical use-after-free vulnerability in Shared Tab Groups of Google Chrome prior to version 152.0.7977.75 (Android/Linux) and 152.0.7977.76 (Windows/Mac). A remote attacker leveraging social engineering (e.g., luring a user to a malicious website or HTML email) can execute ar...

CVE-2026-84354

CVE-2026-84354 is an incorrect authorization flaw in the FileSystem component of Google Chrome prior to 152.0.7977.75. A remote attacker, leveraging social engineering , can execute arbitrary code outside the sandbox via a crafted HTML page, rated CVSS 9.6 (Critical) . The bug (Chromium issue 498...

CVE-2026-84353

Use after free in Shared Tab Groups in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-84352

Use after free in WebGL in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

mitaka v2.10.1

Mitaka Mitaka is a browser extension that makes your OSINT Open Source Intelligence search & scan easier. Key features: Auto IoC indicators of compromise selection with refanging. E.g. example.com to example.com, testatexample.com to [email protected], hxxp://example.com to http://example.co...

CVE-2020-6418

CVE-2020-6418: RCE de Chrome encadenado con una escalada de privilegios de Windows Este repositorio contiene una cadena de explotación funcional de una sola etapa para CVE-2020-6418 un bug de confusión de tipos en el compilador Turbofan de V8, que afecta a Google Chrome 80.0.3987.87 x64. Visitar...

PT-2026-84546

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.75 Description Improper input validation in the DataTransfer component allows a remote attacker to bypass system access restrictions via a co-installed application. This issue can be exploited by...

PT-2026-84551

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.75 Description A UI misrepresentation issue in FullScreen mode allows a remote attacker to spoof the address bar by using a crafted HTML page. Recommendations Update Google Chrome on Androi...

PT-2026-84561

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.75 Description A buffer overflow in the GPU component allows a remote attacker who has already compromised the renderer process to execute arbitrary code outside the sandbox. This is achieved by...

PT-2026-84552

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.75 Description Incorrect authorization in the Actor component allows a remote attacker who has already compromised the renderer process to bypass the web origin policy through a specially crafted HTML...

PT-2026-84568

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.75 Description Improper privilege management in the Downloads component allows a remote attacker who has already compromised the renderer process to spoof the address bar by using a specially crafted...

PT-2026-84550

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.75 Description A confused deputy issue exists in the CredentialProvider on Windows. A remote attacker who has already compromised the renderer process can leak sensitive information by using a special...

Stable Channel Update for Desktop

The Stable channel has been updated to 152.0.7977.75/.76 for Windows and Mac and 152.0.7977.75 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security Fixes and Rewards Note: Access to bug details and links may be kept...

PUB-A-508686241

In Vp9DecEndOfStream of vp9hwdoutput.cc, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...