CVE-2026-93376

A flaw was found in chromium-browser. A local attacker, by leveraging social engineering, could exploit an out-of-bounds read vulnerability within the DataTransfer component. This could allow the attacker to read sensitive memory outside of the browser's security sandbox, potentially leading to...

webkit2gtk3 security update

An update is available for webkit2gtk3. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list WebKitGTK is the port of the portable web rendering engine WebKit to the...

burp-dom-scanner

Burp DOM Scanner It's a Burp Suite's extension to allow for recursive crawling and scanning of Single Page Applications. It runs a Chromium browser to scan the webpage for DOM-based XSS. It can also collect all the requests XHR, fetch, websockets, etc issued during the crawling allowing them to b...

POC-CVE-2024-6778

CVE-2024-6778 Этот репозиторий содержит эксплойты доказательства концепции для CVE-2024-6778, которые представляют собой уязвимости в веб-браузере Chromium, позволяющие совершить побег из песочницы через расширение браузера. Для запуска этих эксплойтов вам понадобится версия Chromium старше, чем...

CVE-2026-91749

An use after free flaw was found in the Workers component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=558456602...

CVE-2026-91733

A flaw was found in Skia, a 2D graphics library used in chromium-browser. This improper state validation vulnerability allows a remote attacker, who has already compromised the renderer process, to read memory outside of the security sandbox. This can be achieved by enticing a user to open a...

CVE-2026-91730

An incomplete cleanup flaw was found in the GetUserMedia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=543640868...

CVE-2026-91708

A race condition flaw was found in the Network component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=553115724...

CVE-2026-91745

An use after free flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=558734727...

Astra Linux – Vulnerability in Chromium

Before version 89.0.4389.72, using free after in WebRTC in Google Chrome allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

Integer overflow in the UI of Google Chrome on Linux prior to version 149.0.7827.103 allowed a remote attacker to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Integer overflow in the GPU in Google Chrome prior to version 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Integer overflow in ANGLE in Google Chrome prior to version 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory through a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87512

A flaw was found in chromium-browser. A use-after-free vulnerability in ANGLE allows a remote attacker to execute arbitrary code outside the sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page, leading to a complete compromise of the affected system...

CVE-2026-87488

A flaw was found in chromium-browser. A use-after-free vulnerability in WebGL, a web graphics library, could allow a remote attacker to execute arbitrary code outside of the browser's security sandbox. This exploitation can occur by enticing a user to visit a specially crafted HTML page...

CVE-2026-87438

A flaw was found in chromium-browser. An out-of-bounds write vulnerability in the WebGL component of Google Chrome on Android allows a remote attacker to execute arbitrary code outside of the sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page...

CVE-2026-84325

A flaw was found in chromium-browser. This improper input validation vulnerability in the DataTransfer component allows a remote attacker, through social engineering, to bypass system access restrictions by leveraging a co-installed application. This could lead to unauthorized access to sensitive...

CVE-2026-87439

A flaw was found in chromium-browser's ServiceWorker. A remote attacker, who has already compromised the renderer process, could exploit this vulnerability by providing a specially crafted HTML page. This could lead to an information leak, allowing the attacker to obtain sensitive information...

CVE-2026-87622

A flaw was found in chromium-browser. Missing authorization in the Federated Credential Management FedCM API allowed a remote attacker to bypass the web origin policy. This bypass could be achieved by enticing a user to visit a crafted HTML page, potentially leading to unauthorized access to...

CVE-2026-87453

A flaw was found in chromium-browser's BackgroundFetch component. A remote attacker, who has already compromised the renderer process, could exploit a confused deputy vulnerability by using a specially crafted HTML page. This could lead to the disclosure of sensitive information...