CVE-2026-106363

Missing authorization in FullScreen in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106317

Google Chrome on Android versions prior to 155.0.8059.39 is vulnerable to a UI misrepresentation flaw in FullScreen mode. A remote attacker can exploit this by serving a crafted HTML page to spoof the address bar . The Chromium security severity is rated as Low , and the issue is associated with ...

CVE-2026-106363

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization flaw in the FullScreen functionality. A remote attacker who has already compromised the renderer process and utilized social engineering can bypass system access restrictions by serving a crafted HTML page. Th...

EUVD-2026-93684

Missing authorization in FullScreen in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

FullscreenBrowserPhishing

Phishing mediante el modo de pantalla completa en el navegador Para empezar, me gustaría señalar que el phishing es ilegal y este proyecto es solo con fines educativos. El proyecto en este repositorio es solo una PoC para mostrar cómo se puede hacer y por eso la versión pública tiene fallos : Dem...

Rocky Linux 8 [CIQ] Security Update: thunderbird / thunderbird-debuginfo / thunderbird-debugsource Multiple Vulnerabilities (crlsa-2022_8547)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20228547 advisory. Mozilla: Service Workers might have learned size of cross-origin media files CVE-2022-45403 Mozilla: Fullscreen notification bypass CVE-2022-45404 Mozilla:...

CVE-2026-95313

A flaw was found in chromium-browser. This flaw allows a remote attacker to execute arbitrary code outside the browser sandbox due to a use-after-free vulnerability in the Fullscreen component, where previously released memory is improperly accessed. By enticing a user to open a specially crafted...

SUSE CVE-2026-102309

Use after free in FullScreen in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

Linux Distros Unpatched Vulnerability : CVE-2026-102309

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in FullScreen in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML...

CVE-2026-102309

An use after free flaw was found in the FullScreen component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=560867085 https://code.google.com/p/chromium/issues/detail?id=102309...

DEBIAN-CVE-2026-102309

Use after free in FullScreen in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-102309

Use after free in FullScreen in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-89388

Use after free in FullScreen in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-102309

Use after free in FullScreen in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-102309

Use after free in FullScreen in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-102309

Use after free in FullScreen in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-102309

A use after free vulnerability exists in the FullScreen component of Google Chrome prior to version 154.0.8037.92 . A remote attacker can exploit this flaw by using a crafted HTML page to achieve arbitrary code execution outside the sandbox. While specific exploit details are not provided, the vu...

DEBIAN-CVE-2026-95313

Use after free in Fullscreen in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-95313

Use after free in Fullscreen in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-95313

Use after free in Fullscreen in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...