CVE-2026-79002

A flaw was found in chromium-browser's SiteIsolation component. This incorrect authorization vulnerability allows a remote attacker, who has already compromised the renderer process, to bypass site isolation by using a specially crafted HTML page. This bypass could lead to further compromise of...

CVE-2026-79231

A flaw was found in Chromium's Media component. A buffer overflow vulnerability allows a remote attacker to execute arbitrary code within the sandbox environment. This can be exploited by enticing a user to visit a specially crafted HTML page...

CVE-2026-79189

A flaw was found in ANGLE, a component used in chromium-browser. A remote attacker could exploit an out-of-bounds write vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially lead to the execution of arbitrary code outside of the browser's security sandbox...

Update Chrome before you browse again

Chrome is rolling out an update for its desktop browser. The update includes 327 security fixes, ten of which address critical vulnerabilities. The stable channel has been updated to 152.0.7977.64/.65 for Windows and Mac, and 152.0.7977.64 for Linux. How to update Chrome If you don’t want to wait...

DEBIAN-CVE-2026-78899

Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-78934

Race condition in ReadAloud in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-78950

Integer overflow in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

DEBIAN-CVE-2026-79131

Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-78937

Use after free in Search in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-79127

Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-78938

Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-79188

Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-11645

CVE-2026-11645 - V8 in Google Chrome prima dell'esecuzione remota di codice Utilizzo rapido root@kitploit: python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe Note sullo sfruttamento Gravità: ALTA CVSS: 8.8 Impatto: Riservatezza, Integrità, Disponibilità Pubblicato:...

CVE-2023-4357-Exploitation

CVE-2023-4357-Sfruttamento Progetto di Sicurezza di Rete Descrizione Validazione insufficiente dell'input non fidato in XML in Google Chrome precedente alla versione 116.0.5845.96 ha permesso a un attaccante remoto di bypassare le restrizioni di accesso ai file tramite una pagina HTML manipolata...

CVE-2021-30573

CVE 2021-30573 Vulnerabilità di Google Chrome CVE-2021-30573 Use after free nella GPU di Google Chrome ha permesso a un attaccante remoto di sfruttare potenzialmente la corruzione dell'heap tramite una pagina HTML appositamente predisposta. CVE-2021-30573 Dettaglio Versioni vulnerabili : Il bug...

CVE-2020-6418

CVE-2020-6418 O CVE 2020-6418 trata da confusão de tipos no V8 do Google Chrome. As versões afetadas eram anteriores a 80.0.3987.122. A vulnerabilidade é alcançada por um atacante remoto que acessa o shell de um dispositivo alvo por meio de uma página HTML manipulada. Requisitos de Ambiente 1...

CVE-2026-79293

Information leak in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79274

Information leak in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-79252

Information leak in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79248

Incorrect authorization in Input in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...