CVE-2026-91734

Incorrect authorization in Core in Google Chrome on on Windows prior to 153.0.8010.47 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...

CVE-2026-91728

Integer overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91734

CVE-2026-91734 is an incorrect authorization flaw in Core of Google Chrome on Windows prior to version 153.0.8010.47 . A local attacker can leverage a local program to execute arbitrary code outside the browser sandbox , potentially leading to complete compromise of the affected system (CVSS 3.1:...

EUVD-2026-79957

Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-79958

Integer overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91728

CVE-2026-91728 is an integer overflow in V8 , the JavaScript engine used by Google Chrome prior to version 153.0.8010.47 . A remote attacker can exploit this flaw by enticing a user to visit a crafted HTML page , leading to arbitrary code execution inside the browser sandbox . The bug was reporte...

CVE-2026-91728

Integer overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-79955

Use after free in Internals in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-91721

Use after free in Internals in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-91721

Use after free in Internals in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-91749

Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

EUVD-2026-79956

Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-91749

Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-91749

Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-91749

CVE-2026-91749 is a use-after-free in the Workers component of Google Chrome , rated Critical by Chromium with a CVSS 3.1 score of 9.6 (AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). A remote attacker could potentially execute arbitrary code outside the sandbox by convincing a user to visit a crafted HTML...

CVE-2026-91726

Out of bounds read in WebGL in Google Chrome on on Android prior to 153.0.8010.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-91726

Out of bounds read in WebGL in Google Chrome on on Android prior to 153.0.8010.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

ghostlock-sabrina

GhostLock Sabrina 针对 Chromecast with Google TV （sabrina）的 root 漏洞利用，通过 CVE-2026-43499 实现——Linux 内核 futex PI（优先级继承）子系统中的一个释放后使用漏洞。 在运行 Android 14、内核版本 5.15.170（PGO+BOLT+LTO，clang 17）的锁定引导加载程序 设备上获取 root 权限。 漏洞详情 GhostLock 利用了 rtmutexstartproxylock 中 -EDEADLK 回滚路径调用的 removewaiter 中的一个缺陷。该函数清除的是...

CVE-2021-30573

CVE-2021-30573-PoC-Google-Chrome Google Chrome の Use After Free 脆弱性が報告されました バグ報奨金総額: $6.000 これは以下の概念実証（Proof of Concept）です： Google SecuritySeverity CVE。 HIGH CVE-2021-30573 https://vulners.com/cve/CVE-2021-30573 Google ブログ記事：...

CVE-2026-58734

In googlembarecvmsg of googlembapoll.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...