CVE-2026-118350

Google Chrome versions prior to 156.0.8078.73 are vulnerable to a Use after free flaw in the Turbolev component. This vulnerability allows a remote attacker to execute arbitrary code inside the sandbox by processing a crafted HTML page. Remediation is available in version 156.0.8078.73 for Window...

CVE-2026-118339

Google Chrome versions prior to 156.0.8078.73 are vulnerable to a Use after free flaw in the Animation component. A remote attacker can exploit this vulnerability by hosting a crafted HTML page, potentially leading to the execution of arbitrary code inside the sandbox . This issue has been addres...

CVE-2026-118357

Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118344

Use after free in Layout in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-118348

Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-118331

Improper input validation in FileAPI in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-118331

Improper input validation in FileAPI in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-118344

Use after free in Layout in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-118348

Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-118344

Google Chrome versions prior to 156.0.8078.73 are vulnerable to a Use after free vulnerability in the Layout component. A remote attacker can exploit this flaw by delivering a crafted HTML page to execute arbitrary code inside the sandbox. The vulnerability has been addressed in the stable channe...

CVE-2026-118331

Google Chrome versions prior to 156.0.8078.73 are vulnerable to a Critical security flaw caused by improper input validation in the FileAPI . A remote attacker can exploit this vulnerability by hosting a crafted HTML page to potentially achieve arbitrary code execution within the sandbox. Remedia...

CVE-2026-118348

Google Chrome is affected by a critical vulnerability (CVE-2026-118348 ) caused by improper input validation within the Skia component. A remote attacker can exploit this by serving a crafted HTML page to a victim, potentially leading to arbitrary code execution inside the browser sandbox. This i...

CVE-2026-118306

Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-118306

Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-118306

A memory corruption vulnerability exists in the FileSystem component of Google Chrome prior to version 156.0.8078.73 . This flaw allows a remote attacker to potentially execute arbitrary code outside the sandbox by leveraging a crafted HTML page. The vulnerability is classified as Critical by Chr...

CVE-2024-12877-Exploit

GO-TO CVE – CVE-2024-12877-Exploit Week 66 | Author: Ali Soltani soltanali0 Welcome to Week 66 of the GO-TO CVE series , where we dissect vulnerabilities, analyze root causes, and demonstrate practical exploitation techniques in a safe, educational context. 🚨 Overview CVE-2024-12877 is a PHP Obje...

CVE-2023-50164Analysis-

CVE-2023-50164: Apache Struts Vulnerable Application A critical security vulnerability, identified as CVE-2023-50164 CVE: 9.8 was found in Apache Struts, allowing attackers to manipulate file upload parameters that can potentially lead to unauthorized path traversal and remote code execution RCE...

CVE-2023-30253-Exploit

CVE-2023-30253 Exploit Dolibarr vulnerable to remote code execution via uppercase manipulation Affected version 17.0.1 Usage: pip3 install -r requirements.txt python3 CVE-2023-30253.py...

CVE-2024-32462

CVE-2024-32462 CVE-2024-32462 code exec sbx escape How the directory should look to compile this ├── org.exploit.SandboxEscape.yaml ├── exploit.py └── app/ └── exploit.desktop How to run & build 1.Install Flatpak SDK if needed: flatpak install flathub org.freedesktop.Platform//21.08 flatpak insta...

CVE-2021-21425

CVE-2021-21425 GravCMS Unauthenticated Arbitrary YAML Write/Update leads to Code Execution CVE-2021-21425 Reference : https://pentest.blog/unexpected-journey-7-gravcms-unauthenticated-arbitrary-yaml-write-update-leads-to-code-execution/...