PoC-in-GitHub

PoC in GitHub 2026 CVE-2026-0006 2026-03-02 In multiple locations, there is a possible out of bounds read and write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-106228

A confused deputy flaw was found in the Google Lens component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/517689673...

CVE-2026-106188

A confused deputy flaw was found in the SignIn component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/515477538...

CVE-2026-106286

A confused deputy flaw was found in the Omnibox component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/497148613...

CVE-2026-106266

Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.80...

Linux Distros Unpatched Vulnerability : CVE-2026-106266

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass web...

Linux Distros Unpatched Vulnerability : CVE-2026-106359

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Confused deputy in DeviceBoundSessionCredentials in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTM...

CVE-2026-106359

Confused deputy in DeviceBoundSessionCredentials in Google Chrome prio...

CVE-2026-106286

Confused deputy in Omnibox in Google Chrome prior to 155.0.8059.39 all...

Linux Distros Unpatched Vulnerability : CVE-2026-106427

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Confused deputy in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions into a privileged pag...

Linux Distros Unpatched Vulnerability : CVE-2026-106286

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Confused deputy in Omnibox in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via crafted network traffic. Chromium...

Linux Distros Unpatched Vulnerability : CVE-2026-106188

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Confused deputy in SignIn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions into a privileged...

Linux Distros Unpatched Vulnerability : CVE-2026-106221

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Confused deputy in WebAPKs in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin...

CVE-2026-106301

Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.80...

CVE-2026-106326

Confused deputy in UI in Google Chrome on on Android prior to 155.0.80...

CVE-2026-106221

Confused deputy in WebAPKs in Google Chrome on on Android prior to 155...

CVE-2026-106188

Confused deputy in SignIn in Google Chrome on on Android prior to 155...

CVE-2026-106228

Confused deputy in Google Lens in Google Chrome prior to 155.0.8059.39...

Linux Distros Unpatched Vulnerability : CVE-2026-106301

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system...

Linux Distros Unpatched Vulnerability : CVE-2026-106326

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Confused deputy in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to bypass system access restrictions into a privileged page...