Astra Linux – Vulnerability in Chromium

Using “after free” in Chromoting within Google Chrome on Linux before version 149.0.7827.53 allowed a remote attacker to execute arbitrary code through malicious network traffic. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Integer overflow in WTF in Google Chrome prior to version 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in Blink in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass content security policy via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Using after-free in Proxy in Google Chrome before version 149.0.7827.103 allowed a remote attacker to execute arbitrary code through malicious network traffic. Chromium security severity: Critical...

Astra Linux – Vulnerability in Chromium

The incorrect security UI in the Tab Strip component of Google Chrome prior to version 149.0.7827.53 allowed a remote attacker to perform domain spoofing through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

In V8 in Google Chrome, prior to version 142.0.7444.59, it was possible for a remote attacker to exploit heap corruption through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in Content Settings in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

The use of “after free” in the Password Manager in Google Chrome before version 143.0.7499.110 allowed a remote attacker to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Before version 94.0.4606.54, using the "after free" mechanism in Performance Manager in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

Type Confusion in V8 in Google Chrome before version 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

Using “after free” in Ozone in Google Chrome before version 149.0.7827.53 allowed a remote attacker to execute arbitrary code through a crafted HTML page. Chromium security severity: Critical...

Astra Linux – Vulnerability in Chromium

In WebAudio in Google Chrome prior to version 148.0.7778.216, it was possible for a remote attacker to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Using "after free" in Blink in Google Chrome before version 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted input in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11645

🚨 CVE-2026-11645 🚨 🌐 Google Chrome V8 제로데이 메모리 손상 취약점 🔥 활발히 악용된 제로데이 ⚡ V8 엔진 메모리 손상 🛡️ 즉시 패치 📖 개요 ⚠️ CVE-2026-11645 는 Google Chrome V8 JavaScript 엔진에 영향을 미치는 높은 심각도의 제로데이 취약점입니다. 이 결함은 공격자가 Out-of-Bounds 읽기/쓰기 조건을 트리거하여 원격 코드 실행RCE을 유발할 수 있게 합니다. 🎯 취약점 정보 🧠 기술 요약 취약점은 Chrome의 V8 JavaScript 엔진 내에...

billing-hack

Billing Hack このコードの詳細については、http://sufficientlysecure.org/index.php/2013/10/29/google-play-billing-hacked/ を参照してください。...

CVE-2026-66907

CVE-2026-66907 — camel-google-storage downloadFileName パストラバーサル 同じApache Camelの脆弱性に対する実行可能な概念実証（PoC）再現コードで、ランタイムごとに1つずつ用意しています：...

CVE-2014-9173

CVE-2014-9173: Google Document Embedder - 時間ベースのブラインドSQLインジェクションの悪用 著者: ratiros01 オリジナルPoC: https://www.exploit-db.com/exploits/35371...

EUVD-2026-77089

The Quads Ads Manager for Google AdSense WordPress plugin before 3.0.5 does not verify payment completion with the configured payment gateway before marking an ad-selling order as paid, allowing users who can place an order to obtain a paid ad placement without payment...