CVE-2025-6558-exp

CVE-2025-6558 - Google Chrome ANGLE/GPU Sandbox Escape...

CVE-2024-2887-REPORT

SSD Advisory – Google Chrome RCE Source: ssd-disclosure.com/ssd-advisory-google-chrome-rce Summary A critical remote code execution vulnerability in Google Chrome versions 123 and earlier affecting WebAssembly WASM garbage-collection type handling. The bug allows type confusion that can be...

GHunt

🌐 GHunt Online version : https://osint.industries 🐍 Now Python 3.13 compatible ! 😊 Description GHunt v2 is an offensive Google framework, designed to evolve efficiently. It's currently focused on OSINT, but any use related with Google is possible. Features : CLI usage and modules Python library...

CVE-2020-6418

CVE-2020-6418 The CVE 2020-6418 is about the the type confusion in V8 in Google chrome.The affected versions were prior to 80.0.3987.122. The vulnerability is achived by remote attacker accessing the shell of a target device via a crafted HTML page. Environment Requirements 1. Google Chrome with...

CVE-2026-91714

A flaw was found in Google Chrome. A remote attacker, leveraging social engineering, could exploit an observable discrepancy in fonts by tricking a user into visiting a specially crafted HTML page. This vulnerability could lead to the leakage of sensitive information...

CVE-2026-91744

A flaw was found in Google Chrome. A race condition in the PlatformIntegration component could allow a remote attacker, who has compromised the renderer process and leveraged social engineering, to obtain sensitive information. This can occur when a user visits a specially crafted HTML page...

CVE-2026-91712

A flaw was found in Google Chrome Extensions. A race condition exists that could be exploited by a remote attacker who has already compromised the browser's renderer process. By crafting a malicious HTML page, the attacker could potentially execute arbitrary code outside of the browser's security...

Chrome-Extractor

Chrome-Extractor Python script that will extract all saved passwords from your google chrome database and save it in chrome.txt Note: Windows only...

CVE-2026-91740

A flaw was found in Skia, a 2D graphics library used in Google Chrome. This vulnerability, stemming from an uninitialized resource, allows a remote attacker to obtain sensitive cross-origin data. By crafting a malicious HTML page, an attacker can trick a user into visiting it, leading to the...

CVE-2026-91735

A flaw was found in Google Chrome's WebUI. This incorrect authorization vulnerability allows a remote attacker, who has already compromised the browser's renderer process, to potentially execute arbitrary code outside of the security sandbox. This exploitation occurs when the attacker provides a...

CVE-2026-91739

A flaw was found in the Transactions Platform component of Google Chrome. A remote attacker, after compromising the renderer process, could exploit a missing authorization vulnerability. This could allow the attacker to spoof user interface UI elements by crafting a malicious HTML page, potential...

CVE-2026-91734

A flaw was found in Google Chrome. This incorrect authorization vulnerability allows a local attacker to execute arbitrary code outside of the browser's security sandbox by using a local program. This could lead to a complete compromise of the affected system...

CVE-2026-91747

A flaw was found in Skia, a 2D graphics library used in Google Chrome. A remote attacker, after compromising the renderer process, could exploit a use-after-free vulnerability by crafting a malicious HTML page. This could allow the attacker to obtain sensitive cross-origin data...

CVE-2026-91713

A flaw was found in the Browser component of Google Chrome. A remote attacker, after compromising the renderer process, could exploit missing authorization to spoof user interface UI elements. This could lead to a user being deceived by malicious UI, potentially enabling further attacks...

CVE-2026-91743

A flaw was found in Google Chrome. A race condition in the browser's core component could allow a remote attacker, who has already compromised the renderer process, to execute arbitrary code outside of the browser's security sandbox. This exploitation is possible by tricking a user into visiting ...

CVE-2026-91726

A flaw was found in Google Chrome. An out-of-bounds read vulnerability in WebGL allows a remote attacker to craft a malicious HTML page. This crafted page can then be used to read memory outside of the browser's security sandbox, leading to information disclosure...

CVE-2026-91731

A flaw was found in Google Chrome. A type confusion vulnerability in the Compositing component allows a remote attacker to execute arbitrary code within the browser's security sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page, leading to unauthorized code...

CVE-2026-91711

A flaw was found in Google Chrome. An out-of-bounds write vulnerability in the ServiceWorker component could allow a remote attacker to execute arbitrary code. This exploitation can occur by enticing a user to visit a specially crafted HTML page, leading to arbitrary code execution within the...

CVE-2021-30573-PoC-Google-Chrome

CVE-2021-30573-PoC-Google-Chrome Google Chrome Use After Free vulnerability reported by S4E Team Total Bug Bounty Reward: $6.000 This is Proof of Concept for: Google SecuritySeverity CVE HIGH CVE-2021-30573 https://vulners.com/cve/CVE-2021-30573 Google Blog post:...

posta

Posta Posta is a tool for researching Cross-document Messaging communication. It allows you to track, explore and exploit postMessage vulnerabilities, and includes features such as replaying messages sent between windows within any attached browser. Prerequisites Google Chrome / Chromium Node.js...