Google Chrome < 152.0.7977.82 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 152.0.7977.82. It is, therefore, affected by multiple vulnerabilities as referenced in the 202609stable-channel-update-for-desktop01882797386 advisory. - Use after free in Skia. CVE-2026-85049 - Improper input validation ...

Linux Distros Unpatched Vulnerability : CVE-2026-84347

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...

miniupnpd_poc

Vulnérabilité de lecture hors limites dans Miniupnpd path supérieure à 526 octets. La cause racine est due à l'absence de validation de la valeur de retour de snprintf, car snprintf retourne la valeur du nombre d'octets qu'elle aurait pu copier, et non le nombre d'octets effectivement copiés. En...

pdfgrab

pdfgrab Версия 0.4.9 Что это? Это возрождённый инструмент, использовавшийся в эпоху, когда по земле бродили динозавры. По сути, он анализирует PDF-файлы на предмет метаданных. Вы можете указать ему файл или каталог с PDF-файлами. Можно указать URL PDF-файла или использовать встроенный поиск Googl...

Google, Anthropic, and OpenAI Unveil Cyber AI Models, Safeguards, and Access Programs

Google on Wednesday announced Gemini 3.8 Flash Cyber, which it described as its most capable cybersecurity model, and has made it available to a set of trusted defenders via a new initiative called the Fairwind Program. "The Fairwind Program gives high-priority defenders like governments,...

CVE-2026-2441

CSS dans Google Chrome avant exécution de code à distance CVE-2026-2441 Aperçu Une vulnérabilité de niveau HIGH, classée sous le nom CVE-2026-2441, a été identifiée, catégorisée sous CWE-416, CWE-416, CVSS 8.8. Un use-after-free dans CSS dans Google Chrome avant la version 145.0.7632.75 permettai...

NetSec-CVE-2023-4357

Projet de Sécurité Réseau — CVE-2023-4357 Aperçu Ce projet est un projet de fin d'études pour un cours de Sécurité Réseau. Le projet se concentre sur la CVE-2023-4357, une vulnérabilité affectant les versions de Google Chrome antérieures à 116.0.5845.96. La vulnérabilité est liée au traitement du...

Chrome-CVE-2024-2887-RCE-POC

Aperçu de Chrome-CVE-2024-2887-RCE-Poc Nom de la vulnérabilité : Google Chrome Type Confusion Type de menace : Exécution de code Probabilité d'exploitation : Élevée Statut du POC : Public Statut d'exploitation dans la nature : Non public Statut de l'EXP : Public Statut des détails techniques :...

SUSE CVE-2026-84323

Missing authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-84324

Use after free in Proxy in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: High...

SUSE CVE-2026-84326

Uninitialized resource in V8 in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-84328

Missing authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-84329

Confused deputy in CredentialProvider in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to leak sensitive information via a crafted HTML page. Chromium security severity: Low...

SUSE CVE-2026-84330

UI misrepresentation in FullScreen in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-84331

Incorrect authorization in Actor in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

SUSE CVE-2026-84332

Incorrect authorization in SiteSettings in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-84333

Use after free in Dawn in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-84334

Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.75 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...

SUSE CVE-2026-84335

Incorrect authorization in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-84347

Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...