DEBIAN-CVE-2026-113322

Memory corruption in Dawn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-105429

Memory corruption in Dawn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-113322

Memory corruption in Dawn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-113322

A memory corruption vulnerability exists in the Dawn component of Google Chrome prior to version 156.0.8078.47 . A remote attacker can exploit this flaw by serving a crafted HTML page to potentially read memory inside the sandbox . No specific exploit details or in-the-wild exploitation reports a...

CVE-2026-113322

Memory corruption in Dawn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: High...

rendering-code-outside-the-sandbox-cve-2026-76036-dawn-webgpu-buffer-overflow-in-chrome-on-android

CVE-2026-76036 — Dawn WebGPU NPOT Depth/Stencil Mipmap Detection Harness Critical CVSS 9.6, CWE-122 heap buffer overflow in Dawn , Chromium's WebGPU implementation, in Google Chrome on Android prior to 151.0.7922.169 stable 151, released 2026-08-18. Root cause, per Dawn fix commit 178fb7048ad3: t...

PT-2026-119019

Memory corruption in Dawn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: High...

cve-2026-13934

CVE-2026-13934 This is the work project repository. Investigation, analysis, work, and reports are handled in one repo D088/D091. This file is the repository/board entry document. For the full folder and artifact conventions, see docs/conventions.md. The body status, conclusions, links is updated...

CVE-2026-5281

⚡ CVE-2026-5281 - Chrome Dawn WebGPU Use-After-Free This vulnerability affected one of the clients we provide services to. This repository is our contribution to the original research: a centralized starting point for the group, so that if a similar vulnerability affecting this component appears...

CVE-2026-5281-CVE-2026-11057-fullchain

CVE-2026-5281+CVE-2026-11057 Android fullchain Device Pixel 7 Android 16 ARM64 Chromium version commit 994c846bbd7a35241ba7c08158c13d66412a6993 HEAD - 146.0.7680.111, tag: 146.0.7680.111 Author: Roger McFarlane Date: Mon Mar 9 12:48:07 2026 -0700 Description Exploitation approach This repository...

Astra Linux – Vulnerability in Chromium

A bug in the object lifecycle mechanism in Dawn, prior to version 149.0.7827.53, allowed a remote attacker to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: Medium...

Dawn Component Access Protected Information

The vulnerability of the Dawn component in Google Chrome and Microsoft Edge relates to the use of an uninitialized resource. Exploiting this vulnerability could allow a malicious actor to gain access to protected information through a specially created HTML page...

Dawn Component DoS

The vulnerability of the Dawn component in Google Chrome and Microsoft Edge is related to insufficient validation of input protected information. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

CVE-2026-106395

An uninitialized resource flaw was found in the Dawn component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553121488...

CVE-2026-106231

An uninitialized resource flaw was found in the Dawn component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553115993...

CVE-2026-93374

A flaw was found in Chromium's Dawn component. A remote attacker can exploit a use-after-free issue—a condition where memory is referenced after being released—by convincing a user to open a specially crafted HTML page. Successful exploitation allows the attacker to execute arbitrary code outside...

CVE-2026-106375

An incomplete cleanup flaw was found in the Dawn component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/536507840...

Linux Distros Unpatched Vulnerability : CVE-2026-106375

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incomplete cleanup in Dawn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a...

Linux Distros Unpatched Vulnerability : CVE-2026-106395

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized resource in Dawn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted...

Linux Distros Unpatched Vulnerability : CVE-2026-106231

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized resource in Dawn in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML...