CVE-2020-6418

CVE-2020-6418 The CVE 2020-6418 is about the the type confusion in V8 in Google chrome.The affected versions were prior to 80.0.3987.122. The vulnerability is achived by remote attacker accessing the shell of a target device via a crafted HTML page. Environment Requirements 1. Google Chrome with...

CVE-2026-91725

A flaw was found in Chromium. A remote attacker could exploit an observable discrepancy in CSS by crafting a malicious HTML page. This vulnerability allows the attacker to leak sensitive information from the user's browser...

CVE-2026-91728

A flaw was found in V8, the JavaScript engine used in Google Chrome. An integer overflow vulnerability allows a remote attacker to execute arbitrary code within the browser's security sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page...

CVE-2026-91746

Integer overflow in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-91709

Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91722

CVE-2026-91722 is a use-after-free vulnerability in the Input component of Google Chrome prior to version 153.0.8010.47 . A remote attacker can potentially execute arbitrary code outside the sandbox by serving a crafted HTML page to the user. The vulnerability carries a Medium severity rating per...

CVE-2026-91719

CVE-2026-91719 is a code injection in XML vulnerability in Google Chrome prior to version 153.0.8010.47 . A remote attacker could exploit it via a crafted HTML page to bypass the web origin policy . The vulnerability is rated Low severity by Chromium. The fix is available in Chrome 153.0.8010.47 ...

CVE-2026-91710

CVE-2026-91710 is a use after free vulnerability in the WebAppInstalls component of Google Chrome , affecting versions prior to 153.0.8010.47 . A remote attacker can execute arbitrary code outside the sandbox by serving a crafted HTML page to a victim. The Chromium security team rates the severit...

CVE-2026-91716

A use-after-free vulnerability in the Auth component of Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox by delivering a crafted HTML page. The Chromium security team rated the severity as High . The issue was fixed in the stable channel...

EUVD-2026-79975

Uninitialized resource in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-91736

CVE-2026-91736 is a use-after-free vulnerability in the DOM component of Google Chrome prior to version 153.0.8010.47 . A remote attacker can execute arbitrary code inside the browser sandbox by enticing a user to visit a crafted HTML page. The bug was reported by Google on 2026-08-26 and carries...

CVE-2026-91731

Type confusion in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91728

CVE-2026-91728 is an integer overflow in V8 , the JavaScript engine used by Google Chrome prior to version 153.0.8010.47 . A remote attacker can exploit this flaw by enticing a user to visit a crafted HTML page , leading to arbitrary code execution inside the browser sandbox . The bug was reporte...

CVE-2021-30573

CVE 2021-30573 Vulnerabilidades de Google Chrome CVE-2021-30573 Un use-after-free en GPU en Google Chrome permitía a un atacante remoto explotar potencialmente la corrupción del heap mediante una página HTML manipulada. Detalle de CVE-2021-30573 Versiones vulnerables : El bug funciona en Google...

CVE-2023-4357-Exploitation

CVE-2023-4357-Exploitation Network Security Project Description Insufficient validation of untrusted input in XML in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to bypass file access restrictions via a crafted HTML page. Reproduce Set up the Environment Download Chrome on Linux...

Astra Linux – Vulnerability in Chromium

The inappropriate implementation of WebAppInstalls in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass the same-origin policy through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Using WebCodecs with “after free” before version 148.0.7778.216 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Insufficient data validation in Animation in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Insufficient data validation in the File System API of Google Chrome prior to version 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

Inappropriate implementations of WebAuthentication in Google Chrome prior to version 96.0.4664.45 allowed a remote attacker to leak cross-origin data through a crafted HTML page...