CVE-2026-78950

CVE-2026-78950 is an integer overflow in the WebRTC component of Google Chrome prior to 152.0.7977.65 , classified with a Low Chromium security severity. The root cause lies in the RTCRtpSender.setParameters() path, where the WebIDL unsigned long maxBitrate parameter is converted into a signed C+...

CVE-2026-79263

CVE-2026-79263 is a race condition in the Extensions component of Google Chrome prior to version 152.0.7977.65 . A remote attacker could exploit it via crafted network traffic to execute arbitrary code inside the sandbox . The Chromium project rates this as Low severity, consistent with the code ...

CVE-2026-79266

A use after free vulnerability in DevTools of Google Chrome prior to 152.0.7977.65 allowed a remote attacker, leveraging social engineering, to execute arbitrary code inside the sandbox via a crafted Chrome extension . The Chromium security severity is rated Medium . The fix is to update Chrome t...

CVE-2026-79266

Use after free in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-78963

Improper input validation in the Media component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium assigned this a Medium severity rating. Remediation is to update Chrome to version 152.0.7...

CVE-2026-79073

CVE-2026-79073 is an improper state validation vulnerability in the Parser component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit this via a crafted HTML page to potentially execute arbitrary code inside the Chrome sandbox . The Chromium security te...

CVE-2026-79182

CVE-2026-79182 is an improper input validation vulnerability in the Media component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker could potentially execute arbitrary code outside the sandbox by delivering a crafted HTML page. Chromium rates the severity as Mediu...

CVE-2026-79139

CVE-2026-79139 is an improper input validation flaw in the Media component of Google Chrome on Windows prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can potentially execute arbitrary code outside the sandbox by delivering a crafted HTML page. The Chro...

CVE-2023-21608

CVE-2023-21608 Discord Server Ce bug était une Use after Free qui a été causée lors de l'opération resetForm pendant la gestion des références mémoire des objets. Blog Adobe Acrobat Reader - resetForm - CAgg UaF - RCE Exploit - CVE-2023-21608 Advisory CVE-2023-21608 Demo...

CVE-2026-79097

Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79097

A use-after-free vulnerability in V8 (Chrome's JavaScript engine) in Google Chrome prior to 152.0.7977.65 allows a remote attacker to execute arbitrary code inside the Chrome sandbox by luring a user into opening a crafted HTML page . Chromium assigns the vulnerability a Medium security severity....

CVE-2026-79033

CVE-2026-79033 is an insufficient control flow management flaw in DevTools within Google Chrome prior to 152.0.7977.65 . A remote attacker leveraging social engineering could exploit this via a crafted HTML page to potentially execute arbitrary code inside the sandbox . The vulnerability is class...

CVE-2026-79227

Type confusion in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker, leveraging social engineering, to execute arbitrary code inside the sandbox via a crafted HTML page. The Chromium security severity is rated Medium . The vulnerability was addressed in the stable channel...

CVE-2026-78901

A race condition in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox by convincing a user to open a crafted HTML page. The Chromium project classified this as Medium severity. The fix is to update Chrome to version 152.0.7977.65 or ...

CVE-2026-78913

CVE-2026-78913 is a use-after-free vulnerability in the Chromoting component of Google Chrome prior to version 152.0.7977.65 . A remote attacker can potentially execute arbitrary code outside the sandbox by sending crafted network traffic. The Chromium security team rates this as Medium severity....

CVE-2026-79091

CVE-2026-79091 is a use-after-free vulnerability in the Bluetooth component of Google Chrome on Mac , affecting versions prior to 152.0.7977.65 . A remote attacker, leveraging social engineering and a crafted HTML page, could execute arbitrary code outside the sandbox . Chromium rates the severit...

CVE-2026-79091

Use after free in Bluetooth in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78951

Use after free in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78951

A use-after-free vulnerability in the ServiceWorker component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox by serving a crafted HTML page. The Chromium security severity is rated Medium . No active exploitation or in-the-wild usag...

CVE-2026-79064

A use-after-free vulnerability in the Network component of Google Chrome on Mac (prior to 152.0.7977.65 ) allows a remote attacker, leveraging social engineering , to execute arbitrary code outside the sandbox via a crafted Chrome extension. Chromium rates the severity as Medium . Remediation is ...