CVE-2023-4357-Exploitation

CVE-2023-4357-악용 네트워크 보안 프로젝트 설명 Google Chrome 116.0.5845.96 이전 버전에서 XML 내 신뢰할 수 없는 입력에 대한 검증이 불충분하여, 원격 공격자가 조작된 HTML 페이지를 통해 파일 접근 제한을 우회할 수 있었습니다. 재현 환경 설정 Linux에서 Chrome 다운로드 root@kitploit: $ wget...

CVE-2021-30573

CVE 2021-30573 Vulnérabilités de Google Chrome CVE-2021-30573 Une utilisation après libération dans le GPU de Google Chrome permettait à un attaquant distant d'exploiter potentiellement une corruption du tas via une page HTML conçue. Détail de CVE-2021-30573 Versions vulnérables : Le bug fonction...

CVE-2021-3395

CVE-2021-3395 建议描述 Pryaniki 6.44.3 中存在一个跨站脚本（XSS）漏洞，允许远程认证用户上传任意文件。当有人访问该附件时，JavaScript 代码将会执行。 漏洞类型 跨站脚本（XSS） 产品供应商 OOO Tekhnologii zashchity 受影响产品代码库 PRYANIKY - 6.44.3 攻击类型 远程 攻击向量 要利用此漏洞，必须有人打开一个特制的 HTML 文件。 供应商是否已确认或承认该漏洞？ true true 发现者 Irina Belyaeva Jet Infosystems, jet.su, Maria Kononova J...

CVE-2026-79133

CVE-2026-79133 is an incorrect authorization flaw in the Forms component of Google Chrome prior to 152.0.7977.65 . A remote attacker could exploit it via a crafted HTML page to obtain sensitive information. Chromium rates the security severity as Low . The fix is available in Chrome 152.0.7977.65...

CVE-2026-79179

CVE-2026-79179 is an incorrect authorization flaw in the DOM component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker could potentially leak sensitive information by delivering a crafted HTML page to the victim. The Chromium team assigned this issue a Low severit...

CVE-2026-79105

Improper input validation in the Mobile component of Google Chrome on iOS prior to version 152.0.7977.65 allowed a remote attacker to bypass system access restrictions by delivering a crafted HTML page. The vulnerability was classified by Chromium with a Low security severity. No exploitation det...

CVE-2026-79197

CVE-2026-79197 is a use-after-free vulnerability in the V8 engine of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker could exploit it via a crafted HTML page to execute arbitrary code inside the sandbox . Chromium rates its security severity as Low , consistent with ...

CVE-2026-79125

CVE-2026-79125 is an information leak in the XR component of Google Chrome prior to version 152.0.7977.65 . A remote attacker can obtain sensitive information by delivering a crafted HTML page to the victim. The Chromium project rates the security severity as Low . The fix is available in Chrome ...

CVE-2026-79246

An information leak in the DataTransfer component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information by serving a crafted HTML page. The vulnerability is classified as Low severity by Chromium. Remediation is to update Chrome to version 152.0.7977.65...

CVE-2026-79244

CVE-2026-79244 is a use-after-free vulnerability in the Animation component of Google Chrome prior to version 152.0.7977.65 . A remote attacker can exploit it via a crafted HTML page to execute arbitrary code inside the Chrome sandbox . The Chromium project classifies the severity as Low , consis...

CVE-2026-79018

CVE-2026-79018 is an information leak in FoldableAPIs within Google Chrome prior to 152.0.7977.65 . A remote attacker could exploit this by delivering a crafted HTML page to a victim, enabling the extraction of sensitive information from the browser context. The Chromium security team rated this ...

CVE-2026-79056

CVE-2026-79056 is a use-after-free vulnerability in the ServiceWorker component of Google Chrome prior to 152.0.7977.65 . A remote attacker could potentially execute arbitrary code outside the sandbox by delivering a crafted HTML page. The Chromium security severity is rated Low . The fix is incl...

CVE-2026-78956

A type confusion vulnerability in V8 (Chrome's JavaScript engine) allowed a remote attacker, leveraging social engineering , to execute arbitrary code inside the sandbox via a crafted HTML page. Affected versions are Google Chrome prior to 152.0.7977.65 . The Chromium security team rated this Low...

CVE-2026-79009

CVE-2026-79009 is a UI misrepresentation vulnerability in Google Chrome prior to 152.0.7977.65 . A remote attacker, leveraging social engineering , can spoof UI elements by serving a crafted HTML page to the victim. Chromium classifies the severity as Low . The affected component is the browser's...

CVE-2026-78896

CVE-2026-78896 is an information leak in the StorageAccessAPI component of Google Chrome prior to version 152.0.7977.65 . A remote attacker could exploit this flaw via a crafted HTML page to obtain cross-origin data . The Chromium project rates the security severity as Low . Remediation is to upd...

CVE-2026-79041

CVE-2026-79041 is a missing authorization vulnerability in the Browser component of Google Chrome on Mac prior to 152.0.7977.65 . A remote attacker leveraging social engineering could bypass the web origin policy into a privileged page by delivering a crafted HTML page . The Chromium project assi...

CVE-2026-79090

CVE-2026-79090 is an improper privilege management flaw in the Actor component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker leveraging social engineering could bypass system access restrictions through a crafted HTML page . The Chromium security team rated this...

CVE-2026-78946

CVE-2026-78946 is an incorrect authorization vulnerability in the Select component of Google Chrome prior to 152.0.7977.65 . A remote attacker could leverage this flaw via a crafted HTML page to bypass the web origin policy , potentially allowing cross-origin data access that would normally be bl...

CVE-2026-79273

CVE-2026-79273 is an incorrect reference resolution vulnerability in WebView within Google Chrome on Android prior to version 152.0.7977.65 . A remote attacker could potentially bypass the web origin policy by serving a crafted HTML page to a victim. Chromium rates the security severity as Low . ...

CVE-2026-79147

CVE-2026-79147 is an information leak in the Skia graphics library within Google Chrome versions prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could potentially obtain sensitive information by delivering a crafted HTML page. The Chromium security team...