EUVD-2026-82476

Buffer overflow in WebGL in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-93375

Incorrect reference resolution in Tracing in Google Chrome on on Windows prior to 153.0.8010.52 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...

EUVD-2026-82477

Incorrect reference resolution in Tracing in Google Chrome on on Windows prior to 153.0.8010.52 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...

CVE-2026-93375

CVE-2026-93375 is a High severity vulnerability (Chromium rating; CVSS 3.1 score 8.1 ) in Google Chrome on Windows prior to 153.0.8010.52 , caused by an incorrect reference resolution in the Tracing component . A local attacker can potentially execute arbitrary code outside the sandbox via a loca...

CVE-2026-93372

Buffer overflow in WebGL in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-93375

Incorrect reference resolution in Tracing in Google Chrome on on Windows prior to 153.0.8010.52 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...

CVE-2026-93372

Buffer overflow in WebGL in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-93374

Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

EUVD-2026-82475

Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-93374

Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2021-21220

Exploitation of CVE-2021-21220 From Incorrect JIT Behavior to Remote Code Execution Overview This presentation explains the exploitation of CVE-2021-21220 , a vulnerability in Google Chrome’s V8 JavaScript engine caused by incorrect JIT compiler assumptions during optimization. The presentation...

CVE-2026-91738

A flaw was found in ANGLE in Google Chrome. This vulnerability, caused by improper input validation, allows a remote attacker to potentially execute arbitrary code outside the sandbox. Exploitation occurs when a user visits a specially crafted HTML page...

CVE-2026-91716

A flaw was found in Google Chrome. This vulnerability, known as a use-after-free, occurs in the Auth component. A remote attacker could exploit this by enticing a user to visit a specially crafted HTML page. Successful exploitation could lead to arbitrary code execution outside of the browser's...

CVE-2026-91718

A flaw was found in Google Chrome. A remote attacker could exploit a use-after-free vulnerability in the Core component by enticing a user to visit a specially crafted HTML page. This could lead to arbitrary code execution outside of the browser's sandbox, potentially compromising the affected...

CVE-2026-91722

A flaw was found in Google Chrome. This 'use after free' vulnerability occurs when the program attempts to use memory that has been deallocated, leading to unpredictable behavior. A remote attacker could exploit this by tricking a user into visiting a specially crafted HTML page. Successful...

google-chrome-emergency-update

Chrome Emergency Security Update This repository contains information and tools related to Google's emergency Chrome update addressing critical security vulnerabilities. 🚨 Emergency Update Notice Google has issued an emergency Chrome update to patch critical zero-day vulnerabilities being activel...

CVE-2026-2441-PoC

CVE-2026-2441 — Chrome CSSFontFeatureValuesMap Use-After-Free CVSS 8.8（高） | 実際に悪用が確認されている | レンダラーRCE（サンドボックス内） Google ChromeのBlink CSSエンジンにおけるuse-after-free脆弱性です。リモートの攻撃者が、細工されたHTMLページを介してブラウザのサンドボックス内で任意のコードを実行できる可能性があります。 脆弱性の詳細...

CVE-2026-0628-POC

CVE-2026-0628-POC CVE-2026-0628 の概念実証（PoC）であり、Google Chrome の タグを使用して特権ページへのスクリプトインジェクションを実証します。CWE-862（Missing Authorization）に分類されるこの脆弱性により、悪意のある拡張機能が 143.0.7499.192 より前のバージョンでセキュリティポリシーを回避できます。 CVE-2026-0628 PoC CVE-2026-0628 の概念実証（PoC）であり、Google Chrome の...

cve-2024-7965-poc

cve-2024-7965-poc CVE-2024-7965は、Google ChromeブラウザのV8...

CVE-2026-2441-PoC

CVE-2026-2441 — Chrome CSSFontFeatureValuesMap Use-After-Free CVSS 8.8（高） | 実際に悪用が確認済み | レンダラーRCE（サンドボックス内） Google ChromeのBlink CSSエンジンにおけるuse-after-free脆弱性で、リモートの攻撃者が細工したHTMLページを介してブラウザのサンドボックス内で任意のコードを実行できる可能性があります。 脆弱性の詳細...