CVE-2026-84323

creationtimestamp| type| source ---|---|--- 2026-09-02 04:46:26+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260902 2026-09-04 04:45:42+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260904...

cve-2026-13934

CVE-2026-13934 作業プロジェクトのリポジトリです。調査・分析・作業・報告書を1つのリポジトリで 扱います（D088/D091）。 このファイルはリポジトリ・ボードの入口ドキュメント です。フォルダ・成果物の規約全文は docs/conventions.md を参照してください。 本文（現状・結論・リンク）はレポート（report）項目が昇格したときに更新します。 調査・分析・作業エージェントはルートREADMEを修正しません。 一行まとめ : Google ChromeのWebGPU実装Dawn がYCbCrサンプラー生成時にVulkan仕様が...

CVE-2023-4357-Chrome-XXE

Краткое описание инструмента Первый в мире однофайловый эксплойт, использующий уязвимость CVE-2023-4357 Chrome XXE, позволяющий атакующему получить локальные файлы посетителей. Первый в мире однофайловый эксплойт, использующий уязвимость CVE-2023-4357 Chrome XXE, позволяющий атакующему получить...

ChromeSHELFLoader

Chrome SHELF Loader CVE-2020-6418에 대한 익스플로잇으로, SHELF Loader를 구현합니다. Tmp.0ut volume 2의 일부로 게시되었습니다...

CVE-2019-5825

Chrome 73.0.3683.86 --no-sandbox용 익스플로잇 V8 버전 6.9.0 https://github.com/exodusintel/Chromium-941743 https://lordofpwn.kr/cve-2019-5825-v8-exploit/ https://github.com/rapid7/metasploit-framework/pull/12574/files...

EUVD-2026-69731

Information leak in Skia in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

EUVD-2026-69743

Improper privilege management in Downloads in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-69751

UI misrepresentation in FullScreen in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-69732

Improper input validation in Omnibox in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: High...

EUVD-2026-69730

Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-69747

Information leak in MediaCapture in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-69748

Incorrect authorization in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-69744

Incorrect authorization in SiteSettings in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-69752

Use after free in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: Low...

EUVD-2026-69740

Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-69745

UI misrepresentation in FullScreen in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-69753

Incorrect authorization in Actor in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-69750

Confused deputy in CredentialProvider in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to leak sensitive information via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-69736

Use after free in Dawn in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-69734

Use after free in Browser in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...