CVE-2026-93374

CVE-2026-93374 is a use after free vulnerability in Dawn , the rendering engine component of Google Chrome on Android , prior to version 153.0.8010.52 . A remote attacker can potentially execute arbitrary code outside the sandbox via a crafted HTML page. The Chromium team rates it Critical , and ...

CVE-2026-91722

A flaw was found in Google Chrome. This 'use after free' vulnerability occurs when the program attempts to use memory that has been deallocated, leading to unpredictable behavior. A remote attacker could exploit this by tricking a user into visiting a specially crafted HTML page. Successful...

CVE-2026-91721

Use after free in Internals in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-91738

Improper input validation in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-91719

Code injection in XML in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-2441

Google Chrome CSS 远程代码执行漏洞（CVE-2026-2441） 概述 已识别出一个高危漏洞，编号为 CVE-2026-2441，归类于 CWE-416、CWE-416（CVSS 8.8）。在 Google Chrome 145.0.7632.75 之前版本中，CSS 存在释放后使用漏洞，允许远程攻击者通过精心构造的 HTML 页面在沙箱内执行任意代码。（Chromium 安全等级：高危） 详情 CVE 编号 ：CVE-2026-2441 发现日期 ：2026-02-13 发布日期 ：2026-02-13 影响范围 ：机密性、完整性、可用性 漏洞利用可用性...

CVE-2026-4447

CVE-2026-4447 - Google Chrome 旧版本 V8 远程代码执行漏洞 快速使用 root@kitploit: python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe 利用说明 严重性： 高 CVSS： 8.8 影响范围： 机密性、完整性、可用性 发布时间： 2026-03-20 技术摘要 Google Chrome 146.0.7680.153 之前版本中的 V8 引擎存在不当实现，允许远程攻击者通过精心构造的 HTML 页面在沙箱内执行任意代码。（Chromium...

CVE-2026-91725

A flaw was found in Chromium. A remote attacker could exploit an observable discrepancy in CSS by crafting a malicious HTML page. This vulnerability allows the attacker to leak sensitive information from the user's browser...

CVE-2026-91728

A flaw was found in V8, the JavaScript engine used in Google Chrome. An integer overflow vulnerability allows a remote attacker to execute arbitrary code within the browser's security sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page...

CVE-2026-91709

A flaw was found in the ServiceWorker component of Chromium. A remote attacker could exploit a type confusion vulnerability by enticing a user to visit a crafted HTML page. This could lead to arbitrary code execution within the sandbox environment...

CVE-2026-91745

Use after free in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91744

Race condition in PlatformIntegration in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: High...

CVE-2026-91746

Integer overflow in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-91743

Race condition in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-91745

Use after free in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-91746

Integer overflow in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-91735

Incorrect authorization in WebUI in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-91736

Use after free in DOM in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-91740

Uninitialized resource in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-91737

Use after free in PDF in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...