3509 matches found
Astra Linux – Vulnerability in Chromium
In V8 in Google Chrome, prior to version 139.0.7258.127, it was possible for a remote attacker to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
Insufficient validation of untrusted input in the Settings section of Google Chrome before version 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page through a crafted HTML page...
Astra Linux – Vulnerability in Chromium
Before version 101.0.4951.41, using the Browser Switcher in Google Chrome allowed a remote attacker to potentially exploit heap corruption by using a crafted HTML page, as long as that attacker could convince a user to perform certain user interactions...
Astra Linux – Vulnerability in Chromium
In versions of Google Chrome on Android prior to 101.0.4951.41, the security interface in the Downloads section allowed a remote attacker to spoof the APK download dialog box through a crafted HTML page...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in Autofill in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-76047
A flaw was found in chromium-browser. A remote attacker could exploit a type confusion vulnerability in the V8 JavaScript engine by enticing a user to visit a specially crafted HTML page. This could allow the attacker to execute arbitrary code within the browser's sandbox, potentially compromisin...
CVE-2026-76041
An information leak flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=540027341 Mitigation Avoid visiting untrusted websites or opening untrusted HTML content. Users should exercise caution when browsing the internet a...
CVE-2026-76040
A flaw was found in chromium-browser. This use-after-free vulnerability allows a remote attacker, through social engineering, to execute arbitrary code outside of the sandbox by enticing a user to visit a specially crafted HTML page. This could lead to a complete compromise of the affected system...
CVE-2026-19171
A flaw was found in chromium-browser. This use-after-free vulnerability in the Media component allows a remote attacker to potentially escape the browser's security sandbox. Exploitation can occur by enticing a user to visit a specially crafted HTML page...
CVE-2026-19560
A flaw was found in chromium-browser. A remote attacker could exploit a use-after-free vulnerability in the Blink component by enticing a user to visit a specially crafted HTML page. This could lead to arbitrary code execution within the sandbox environment, potentially compromising the affected...
CVE-2026-19151
A flaw was found in chromium-browser. A remote attacker could exploit a use-after-free vulnerability in the V8 JavaScript engine by crafting a malicious HTML page. This could allow the attacker to execute arbitrary code within the browser's sandbox, potentially leading to further system compromis...
CVE-2026-19556
A flaw was found in chromium-browser. This use-after-free vulnerability in the V8 JavaScript engine allows a remote attacker to execute arbitrary code within the browser's sandbox. Exploitation occurs when a user visits a specially crafted HTML page, leading to a compromise of the affected system...
GHSA-J3C7-7QWM-398M vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-19155 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-25G9-FMC9-9M6P vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-G96H-6MVM-96FC vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-19159
A flaw was found in chromium-browser. This use-after-free vulnerability in the Views component allows a remote attacker to potentially exploit heap corruption. By convincing a user to engage in specific user interface gestures and visit a crafted HTML page, an attacker could achieve arbitrary cod...
Linux Distros Unpatched Vulnerability : CVE-2026-19172
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a...
CVE-2026-19140
Use after free in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...