Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted inputs in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass the same-origin policy through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass the same-origin policy through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

The use of “after free” in the Password Manager in Google Chrome before version 143.0.7499.110 allowed a remote attacker to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Before version 94.0.4606.54, using the "after free" mechanism in Performance Manager in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

Before version 91.0.4472.77, using WebAudio with "after free" in Google Chrome allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

In V8 in Google Chrome, prior to version 142.0.7444.59, it was possible for a remote attacker to exploit heap corruption through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in Content Settings in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Using after-free in Proxy in Google Chrome before version 149.0.7827.103 allowed a remote attacker to execute arbitrary code through malicious network traffic. Chromium security severity: Critical...

Astra Linux – Vulnerability in Chromium

Using “after free” in Chromoting within Google Chrome on Linux before version 149.0.7827.53 allowed a remote attacker to execute arbitrary code through malicious network traffic. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Type Confusion in V8 in Google Chrome before version 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-11645

🚨 CVE-2026-11645 🚨 🌐 Google Chrome V8 ゼロデイメモリ破損の脆弱性 🔥 活発に悪用されているゼロデイ ⚡ V8 エンジンのメモリ破損 🛡️ 直ちにパッチを適用 📖 概要 ⚠️ CVE-2026-11645 は、Google Chrome V8 JavaScript エンジンに影響を与える深刻度の高いゼロデイ脆弱性です。この欠陥により、攻撃者は範囲外読み取り/書き込み Out-of-Bounds Read/Write 状態を引き起こし、リモートコード実行 RCE に至る可能性があります。 🎯 脆弱性情報 🧠 技術概要 この脆弱性は Chrome の V8...

CVE-2026-11645

CVE-2026-11645 - Google ChromeのV8におけるリモートコード実行脆弱性 簡単な使い方 root@kitploit: python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe 悪用に関する注意点 重要度: HIGH CVSS: 8.8 影響: 機密性、完全性、可用性 公開日: 2026-06-09 技術概要 Google Chrome...

cve-2025-2783-chrome_sandbox_escape_reproduction

CVE-2025-2783：Google Chrome Mojo 沙箱逃逸 CVSS 评分： 8.3（高危） 发现者： Kaspersky 状态： 已在野外被积极利用（间谍活动） 概述 CVE-2025-2783 是 Google Chrome 的 Mojo 进程间通信（IPC）框架中的一个 Windows 特定权限提升漏洞。它通过利用 Mojo 消息传递层中不正确的句柄处理方式，允许被攻破的渲染器进程逃逸 Chrome 沙箱。 该 CVE 是作为针对记者和反对派人物的活跃利用链的一部分被发现的。该沙箱逃逸漏洞与另一个独立的渲染器远程代码执行（RCE）漏洞配合使用，以实现对系统的完全控制...

GLSA-202609-02 : Chromium, Google Chrome, Microsoft Edge, Opera, Vivaldi: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202609-02 Chromium, Google Chrome, Microsoft Edge, Opera, Vivaldi: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Chromium, Google Chrome, Microsoft Edge, Opera, Vivaldi. Please review the CVE identifier...

CVE-2026-87650

A flaw was found in Google Chrome's WebGL component. A remote attacker could exploit an out-of-bounds read vulnerability by tricking a user into visiting a specially crafted HTML page. This could potentially allow the attacker to execute arbitrary code outside of the browser's security sandbox,...

CVE-2026-87643

A flaw was found in Google Chrome. An integer overflow vulnerability exists in the Graphics Processing Unit GPU. A remote attacker could exploit this by enticing a user to visit a specially crafted HTML page. This could potentially lead to arbitrary code execution outside of the browser's securit...

CVE-2026-87638

A flaw was found in Google Chrome's Media component. A remote attacker could exploit an out-of-bounds write vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially allow the attacker to execute arbitrary code outside of the browser's security sandbox...

CVE-2026-87621

A flaw was found in ANGLE, a component of Google Chrome. This out-of-bounds write vulnerability allows a remote attacker to potentially execute arbitrary code. By tricking a user into visiting a specially crafted HTML page, an attacker could bypass the browser's security sandbox and execute...

CVE-2026-87607

A flaw was found in Google Chrome. This vulnerability, known as a 'use after free' error, occurs when a program attempts to use memory after it has been deallocated. This can allow a remote attacker to potentially execute arbitrary code outside the browser's security sandbox when a user visits a...