23951 matches found
CVE-2021-30573
CVE 2021-30573 Google Chrome Vulnerabilities CVE-2021-30573 Use after free in GPU in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2021-30573 Detail Vulnerable versions : The bug works in Google Chrome 91 or lower. It is patched in 92+...
Microsoft-Edge-Information-Disclosure
Microsoft-Edge-Information-Disclosure CVE-2024-30056 Microsoft Edge Chromium-based Vulnerabilidad de Divulgación de Información Esta es una vulnerabilidad en Microsoft Edge Chromium-based. El atacante pudo engañar al usuario para que revelara información sensible sin su conocimiento. Poc:...
CVE-2020-6418
CVE-2020-6418 El CVE-2020-6418 trata sobre la confusión de tipos en V8 de Google Chrome. Las versiones afectadas fueron anteriores a 80.0.3987.122. La vulnerabilidad se logra mediante un atacante remoto que accede al shell de un dispositivo objetivo a través de una página HTML manipulada...
CVE-2021-41074
CVE-2021-41074 CSRF en Qloapps HotelCommerce 1.5.1 Hay una vulnerabilidad de CSRF en HotelCommerce 1.5.1. Puede permitir que cualquier persona cambie el correo electrónico del administrador. Si un atacante consigue que un administrador haga clic en un documento HTML manipulado maliciosamente, pue...
CVE-2026-79147
A flaw was found in Skia, a 2D graphics library used in Google Chrome. A remote attacker, after compromising the renderer process, could exploit this vulnerability by tricking a user into visiting a specially crafted HTML page. This could potentially lead to the disclosure of sensitive informatio...
CVE-2023-4357-Exploitation
CVE-2023-4357-Exploitation Proyecto de Seguridad de Redes Descripción La validación insuficiente de entradas no confiables en XML en Google Chrome anterior a 116.0.5845.96 permitió que un atacante remoto omitiera las restricciones de acceso a archivos mediante una página HTML manipulada. Reproduc...
CVE-2021-3395
CVE-2021-3395 Descripción sugerida Una vulnerabilidad de cross-site scripting XSS en Pryaniki 6.44.3 permite a usuarios autenticados remotos cargar un archivo arbitrario. El código JavaScript se ejecutará cuando alguien visite el archivo adjunto. Tipo de Vulnerabilidad Cross Site Scripting XSS...
chromium-browser: skia: chromium-browser: skia: Arbitrary code execution via crafted HTML page
A flaw was found in Skia, a 2D graphics library. A remote attacker, who has already compromised the renderer process, could exploit a use-after-free vulnerability by providing a specially crafted HTML page. This could lead to the execution of arbitrary code within the sandbox environment,...
CVE-2026-11645
CVE-2026-11645 - V8 in Google Chrome prior to Remote Code Execution Quick Usage root@kitploit: python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe Exploitation Notes Severity: HIGH CVSS: 8.8 Impact: Confidentiality, Integrity, Availability Published: 2026-06-09...
CVE-2022-44311
Description for CVE-2022-44311 html2xhtml v1.3 was discovered to contain an Out-Of-Bounds read in the function static void elmclosetreenodet nodo at procesador.c. This vulnerability allows attackers to access sensitive files or cause a Denial of Service DoS via a crafted html file. Reproduction T...
Linux Distros Unpatched Vulnerability : CVE-2026-93380
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in FileSystem in Google Chrome prior to 153.0.8010.52 allowed a remote attacker who had compromised the renderer process and leveraged social...
Linux Distros Unpatched Vulnerability : CVE-2026-93385
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in Paint in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium...
Linux Distros Unpatched Vulnerability : CVE-2026-93382
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in PDFium in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...
Linux Distros Unpatched Vulnerability : CVE-2026-93377
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Type confusion in V8 in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbo...
Linux Distros Unpatched Vulnerability : CVE-2026-93379
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in ORB in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium...
Linux Distros Unpatched Vulnerability : CVE-2026-93383
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in Permissions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium...
DEBIAN-CVE-2026-93387
Improper state validation in Skia in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...
CVE-2026-93387
Improper state validation in Skia in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...
DEBIAN-CVE-2026-93377
Type confusion in V8 in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...