CVE-2026-9964

A use after free (memory error) vulnerability exists in the Bluetooth module of Google Chrome on Mac systems prior to version 148.0.7778.216 . The root cause is the improper management of object lifetimes, where Bluetooth resources are reused after being released. An attacker can exploit this by ...

nodejs: Certificate Verification Bypass via String Injection

It was found that node.js did not safely read the x509 certificate generalName format properly, resulting in data injection. A certificate could use a specially crafted extension in order to be successfully validated, permitting an attacker to impersonate a trusted host...

CVE-2018-6033

Insufficient data validation in Downloads in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially run arbitrary code outside sandbox via a crafted Chrome Extension...