EUVD-2026-79958

Integer overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-79957

Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91721

Use after free in Internals in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

EUVD-2026-79955

Use after free in Internals in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-91749

Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

EUVD-2026-79956

Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-91749

Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-91721

Use after free in Internals in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-91749

Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-91749

CVE-2026-91749 is a use-after-free in the Workers component of Google Chrome , rated Critical by Chromium with a CVSS 3.1 score of 9.6 (AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). A remote attacker could potentially execute arbitrary code outside the sandbox by convincing a user to visit a crafted HTML...

CVE-2026-91726

Out of bounds read in WebGL in Google Chrome on on Android prior to 153.0.8010.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-91726

Out of bounds read in WebGL in Google Chrome on on Android prior to 153.0.8010.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

ghostlock-sabrina

GhostLock Sabrina Chromecast with Google TV （sabrina）向けのrootエクスプロイト。CVE-2026-43499 -- Linuxカーネルのfutex PI（優先度継承）サブシステムにおけるuse-after-freeを悪用する。 Android 14、カーネル5.15.170（PGO+BOLT+LTO、clang 17）を実行するロックされたブートローダー のデバイスでrootを取得する。 脆弱性...

CVE-2021-30573

CVE-2021-30573-PoC-Google-Chrome Google Chrome의 Use After Free 취약점 보고됨 Total Bug Bounty Reward: $6.000 이것은 다음에 대한 개념 증명PoC입니다: Google SecuritySeverity CVE. HIGH CVE-2021-30573 https://vulners.com/cve/CVE-2021-30573 Google 블로그 포스트:...

CVE-2026-58734

In googlembarecvmsg of googlembapoll.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-79013

In googlembarecvmsg of googlembapoll.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

AuroraStore

Aurora Store Aurora Store を使用すると、公式 Google Play ストアからアプリを検索してダウンロードできます。アプリの説明、スクリーンショット、アップデート、レビューを確認し、Google Play から APK を直接デバイスにダウンロードできます。 Aurora Store を使用するには、初回起動時に Aurora Store を設定する際、Google Play アカウントでログインしてください。 従来のアプリストアとは異なり、Aurora Store はアプリを所有、ライセンス、または配布していません。Aurora Store...

CVE-2022-3656

Imperva Red Teamは最近、Google ChromeおよびChromiumベースのブラウザの25億人以上のユーザーに影響を与える、CVE-2022-3656と呼ばれる脆弱性を公開しました。 この脆弱性により、暗号化ウォレットやクラウドプロバイダーの認証情報などの機密ファイルが窃取される可能性があります。 脆弱性の詳細: 1.https://bugs.chromium.org/p/chromium/issues/detail?id=1345275c34...

NetSec-CVE-2023-4357

网络安全项目 — CVE-2023-4357 概述 本项目是网络安全课程的期末项目。 该项目聚焦于 CVE-2023-4357，这是一个影响 116.0.5845.96 之前版本的 Google Chrome 的漏洞。该漏洞与 XML/XSLT 的处理有关，可能允许恶意文档绕过预期的文件访问限制。 复现 我在虚拟机中使用旧版 Google Chrome 复现了该漏洞，并分析了 XML 文档如何触发这一易受攻击的行为。 所提供的 XML/SVG 文件用于复现该漏洞，并演示对 /etc/passwd 的未授权访问。 环境 VirtualBox Google Chrome...

CVE-2026-19407

Bucket Squatting in Google Cloud Gemini Enterprise Agent Platform SDK for Python versions prior to 1.166.1 allows an attacker to achieve Remote Code Execution RCE and tenant-project token theft...