CVE-2026-79064

A use-after-free vulnerability in the Network component of Google Chrome on Mac (prior to 152.0.7977.65 ) allows a remote attacker, leveraging social engineering , to execute arbitrary code outside the sandbox via a crafted Chrome extension. Chromium rates the severity as Medium . Remediation is ...

CVE-2026-79245

CVE-2026-79245 is a use after free vulnerability in the UI component of Google Chrome prior to version 152.0.7977.65 . A local attacker who has already compromised the renderer process can exploit this flaw to execute arbitrary code outside the sandbox via a local program. The Chromium security t...

CVE-2026-79230

Improper input validation in ANGLE (a graphics rendering library) in Google Chrome on Mac prior to 152.0.7977.65 allows a remote attacker to potentially execute arbitrary code outside the sandbox by luring a user into visiting a crafted HTML page. The Chromium project rates the severity as Medium...

CVE-2026-78978

CVE-2026-78978 is an out-of-bounds read in ANGLE within Google Chrome on Windows (versions prior to 152.0.7977.65 ). A remote attacker can exploit this by delivering a crafted HTML page, potentially leading to arbitrary code execution outside the sandbox . The Chromium project classifies the seve...

CVE-2026-78983

CVE-2026-78983 is a use-after-free vulnerability in the Views component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could leverage a crafted HTML page to execute arbitrary code outside the sandbox . Chromium rat...

CVE-2026-78944

Use after free in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-78944

A use-after-free vulnerability in DevTools within Google Chrome prior to version 152.0.7977.65 allowed a remote attacker, leveraging social engineering , to execute arbitrary code inside the sandbox via a crafted Chrome extension . The Chromium project rated the severity as Medium , consistent wi...

CVE-2026-78983

Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78905

A type confusion vulnerability in the ANGLE component of Google Chrome (prior to 152.0.7977.65 ) allowed a remote attacker to potentially execute arbitrary code outside the sandbox by delivering a crafted HTML page. The Chromium security team classified the issue as Medium severity. The fix is av...

CVE-2026-79127

An out-of-bounds write in the ANGLE component of Google Chrome prior to 152.0.7977.65 allows a remote attacker to execute arbitrary code outside the browser sandbox by luring a victim into visiting a crafted HTML page . Chromium classifies the severity as Medium . The fix is available in Chrome 1...

CVE-2025-23968

AI Bud – AI Content Generator, AI Chatbot, ChatGPT, Gemini, GPT-4o Das AI Bud Plugin stellt einen REST-API-Endpunkt /wp-json/ai-buddy/v1/wp/attachments bereit, der das Hochladen von Dateien in die WordPress-Mediathek ermöglicht. Die Dateilogik des Endpunkts enthält eine Dateiumbenennungsfunktion,...

CVE-2025-49113-Simulation

Laboratorio RCE Roundcube CVE-2025-49113 Un ambiente di laboratorio containerizzato e pratico per simulare e sfruttare una critica vulnerabilità RCE post-autenticazione in Roundcube Webmail, identificata come CVE-2025-49113. 📖 Informazioni sulla Vulnerabilità Questo laboratorio dimostra una...

CVE-2026-78906

A race condition in the ANGLE rendering library within Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox by serving a crafted HTML page. Chromium assigned this a Medium security severity. The fix shipped in Chrome 152.0.7977.6...

CVE-2026-79132

CVE-2026-79132 is an improper input validation vulnerability in the Input component of Google Chrome on Android , affecting versions prior to 152.0.7977.65 . An attacker who had already compromised the renderer process could leverage a crafted HTML page to potentially execute arbitrary code outsi...

CVE-2026-79215

CVE-2026-79215 is an integer overflow in the WebGL component of Google Chrome prior to version 152.0.7977.65 . A remote attacker can potentially execute arbitrary code outside the sandbox by luring a victim into loading a crafted HTML page. Chromium rates the security severity as Medium . Remedia...

CVE-2026-78910

A buffer overflow in the V8 JavaScript engine of Google Chrome (prior to 152.0.7977.65 ) allows a remote attacker to execute arbitrary code inside the sandbox by serving a crafted HTML page. The Chromium team classifies this as Medium severity. No exploitation details or in-the-wild activity are ...

CVE-2026-79231

CVE-2026-79231 is a buffer overflow in the Media component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit this vulnerability by delivering a crafted HTML page , enabling arbitrary code execution inside the sandbox . The Chromium security severity is r...

CVE-2026-78891

CVE-2026-78891 is a buffer overflow in the WebRTC component of Google Chrome affecting versions prior to 152.0.7977.65 . A remote attacker can exploit this vulnerability via a crafted HTML page to achieve arbitrary code execution inside the sandbox . Chromium rates the security severity as Medium...

RCE-Exploit-Framework

RCE-Exploit-Framework Dieses Framework wurde entwickelt, um Penetrationstestern oder Entwicklern zu helfen, die Mechanik von Remote Code Execution RCE-Exploits zu verstehen. Features Payload-Generator : Unterstützt die Erstellung benutzerdefinierter Payloads auf Basis von Python, Bash und PHP...

CVE-2026-79140

CVE-2026-79140 is a use-after-free vulnerability in the Views component of Google Chrome on Mac , affecting versions prior to 152.0.7977.65 . A remote attacker could exploit this by serving a crafted HTML page , potentially enabling arbitrary code execution outside the sandbox . Chromium classifi...