CVE-2026-87572

A flaw was found in the DevTools component of Chromium. A remote attacker, after compromising the renderer process, could exploit an injection vulnerability by crafting a malicious HTML page. This could potentially lead to the execution of arbitrary code outside the sandbox, allowing the attacker...

CVE-2026-87537

A flaw was found in Google Chrome's Extensions. A remote attacker, who has already compromised the browser's renderer process, could exploit a missing authorization vulnerability. This allows the attacker to execute arbitrary code outside of the browser's security sandbox by sending specially...

CVE-2026-87524

A flaw was found in the Core component of Google Chrome. This use-after-free vulnerability allows a remote attacker, who has compromised the renderer process, to potentially execute arbitrary code outside the sandbox. This exploitation occurs when a user visits a specially crafted HTML page,...

CVE-2026-87514

A flaw was found in chromium-browser. This use-after-free vulnerability allows a local attacker to execute arbitrary code outside of the sandbox environment. This can be achieved by exploiting the flaw through a local program, leading to a complete compromise of the affected system...

WPTaskScheduler_CVE-2024-49039

WPTaskScheduler Persistence & CVE-2024-49039, as one of Attack Surface within Task Scheduler. WPTaskScheduler.dll is a component of Task Scheduler, since win 10 1507. This is likely a backdoor tool used for persistence, which was analyzed by security researchers, who found that able to bypass...

CVE-2026-87582

A flaw was found in Google Chrome's DataTransfer component. This confused deputy vulnerability allows a remote attacker, who has already compromised the renderer process, to potentially execute arbitrary code outside the browser's security sandbox. This exploitation occurs through a specially...

CVE-2026-87479

A flaw was found in Extensions in Google Chrome. This insufficient policy enforcement vulnerability allows a remote attacker, who has compromised the renderer process and leveraged social engineering, to potentially execute arbitrary code outside the sandbox. This exploitation can occur via a...

CVE-2026-87547

A flaw was found in Google Chrome's FileSystem component. This vulnerability, caused by incorrect reference resolution, could allow a remote attacker to leverage social engineering tactics. By enticing a user to visit a specially crafted HTML page, the attacker could potentially execute arbitrary...

CVE-2026-87647

A flaw was found in chromium-browser. This vulnerability involves an uninitialized resource within the Graphics Processing Unit GPU. A remote attacker, after compromising the renderer process, could exploit this by crafting a malicious HTML page. Successful exploitation would allow the attacker t...

CVE-2026-87533

A flaw was found in DevTools in Google Chrome. This use-after-free vulnerability allows a local attacker to execute arbitrary code outside the sandbox by means of a local program. This could lead to a complete compromise of the affected system...

CVE-2026-87554

A flaw was found in Chromoting. This vulnerability, a race condition, allows a local attacker to execute arbitrary code outside of the sandbox environment. By exploiting this flaw with a local program, an attacker could gain unauthorized control over the affected system...

CVE-2026-87510

A flaw was found in chromium-browser's FileAPI component. A remote attacker, after compromising the renderer process, could exploit improper input validation by crafting a malicious HTML page. This could potentially allow the attacker to execute arbitrary code outside of the browser's security...

CVE-2026-87467

A flaw was found in the Updater component of Chromium. A local attacker could exploit a race condition to potentially execute arbitrary code outside of the sandbox environment. This could lead to a complete compromise of the affected system...

CVE-2026-87529

A flaw was found in Media in Google Chrome. This numeric truncation error allows a remote attacker to potentially execute arbitrary code outside the sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page...

CVE-2026-87487

A flaw was found in the FileSystem component of Chromium. This missing authorization vulnerability could allow a remote attacker, who has already compromised the renderer process and leveraged social engineering, to potentially execute arbitrary code outside of the sandbox. This exploitation is...

CVE-2026-87481

A flaw was found in WebView in Google Chrome. This incorrect authorization vulnerability allows a remote attacker, who has already compromised the renderer process, to potentially execute arbitrary code outside of the security sandbox. This can be achieved by enticing a user to visit a specially...

CVE-2026-87480

A flaw was found in chromium-browser. This use-after-free vulnerability in the Printing component allows a remote attacker, who has already compromised the renderer process, to potentially execute arbitrary code outside of the sandbox. This can be achieved by enticing a user to visit a specially...

CVE-2026-87457

A flaw was found in the Updater component of Google Chrome. A local attacker could exploit a race condition to execute arbitrary code outside of the browser's security sandbox by using a local program. This could lead to a complete compromise of the affected system...

CVE-2026-87644

A flaw was found in Google Chrome. Incorrect authorization in the Views component could allow a remote attacker, who has compromised the renderer process and used social engineering, to execute arbitrary code outside of the browser's security sandbox. This exploitation occurs via a specially...

CVE-2026-87633

A flaw was found in chromium-browser. This use-after-free vulnerability allows a local attacker to execute arbitrary code outside of the sandbox environment. The exploitation occurs through user interface UI interaction, leading to a compromise of the system beyond the intended security boundarie...