134 matches found
Chrome-Skia-CVE-2024-8636
Chrome M128 ใงไฟฎๆญฃ: https://chromereleases.googleblog.com/2024/09/stable-channel-update-for-desktop10.html ๅ็พๆ้ : 1. chromium.diff ใใใใ chromium ใซ้ฉ็จใใพใใ 2. genskpic.py ใๅฎ่กใใฆ drawablepicture.skp.hh ใ็ๆใใ็ๆใใใใใกใคใซใ src/gpu/commandbuffer/client ใซ็งปๅใใพใใ 3. ใใฉใฆใถใใใซใใใฆ่ตทๅใใพใใ 4. index.html ใ้ใใฆ PoC ใใใชใฌใผใใพใ...
Chrome-Skia-CVE-2024-8193
Chrome M128 ใงไฟฎๆญฃใใใพใใ๏ผhttps://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop28.html ๅ็พๆ้ ๏ผ 1. chromium ใซ chromium.diff ใใใใ้ฉ็จใใพใใ 2. genskpic.py ใๅฎ่กใใฆ drawablepicture.skp.hh ใ็ๆใใ็ๆใใใใใกใคใซใ src/gpu/commandbuffer/client ใซ็งปๅใใพใใ 3. ใใฉใฆใถใใใซใใใฆ่ตทๅใใพใใ 4. index.html ใ้ใใฆ PoC...
Chrome-Skia-CVE-2024-8198
Fixed in Chrome M128: https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop28.html Steps to reproduce: 1. Apply the chromium.diff patch to chromium. 2. Run genskpic.py to generate drawablepicture.skp.hh, then move the generated file to src/gpu/commandbuffer/client. 3...
Chrome-Skia-CVE-2024-7966
Fixed in Chrome M128: https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop21.html Steps to reproduce: root@kitploit: Apply the chromium.diff patch to chromium. Run genskpic.py to generate drawablepicture.skp.hh, then move the generated file to...
cve-2026-13934
CVE-2026-13934 This is the work project repository. Investigation, analysis, work, and reports are handled in one repo D088/D091. This file is the repository/board entry document. For the full folder and artifact conventions, see docs/conventions.md. The body status, conclusions, links is updated...
Trespasser
CVE-2026-74970 ยท Firefox Fission site-isolation bypass via missing PipelineId namespace check This directory holds an honest reproduction scaffold for a Fission site-isolation authorization bypass in Firefox WebRender. Under Fission each content process owns a distinct PipelineId namespace, but t...
EUVD-2026-69737
Buffer overflow in GPU in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-79071
Race condition in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79071
Race condition in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
Astra Linux โ Vulnerability in Chromium
Before version 148.0.7778.96, using free after in the GPU in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: Medium...
Astra Linux โ Vulnerability in Chromium
A stack buffer overflow in the GPU process in Google Chrome on Linux prior to version 88.0.4324.182 allowed a remote attacker to potentially perform out-of-bounds memory access through a crafted HTML page...
CVE-2026-76042
Use of uninitialized resource in GPU in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...
DEBIAN-CVE-2026-76042
Use of uninitialized resource in GPU in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-76042
CVE-2026-76042 is a use of uninitialized resource in the GPU component of Google Chrome prior to 151.0.7922.169 . A remote attacker who had already compromised the renderer process could read memory outside the sandbox via a crafted HTML page. Chromium rates this High severity, though the CVSS 3....
CVE-2026-76042
Use of uninitialized resource in GPU in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...
PT-2026-77329
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.169 Description A remote attacker who has compromised the renderer process can read memory outside the sandbox by using a crafted HTML page. This is caused by the use of an uninitialized resource in t...
Out-of-bounds Read
Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Out-of-bounds Read in the paint event image generation process when offscreen rendering is enabled. An...
Astra Linux โ Vulnerability in Chromium
Before version 149.0.7827.103, the out-of-bounds reading in WebRTC in Google Chrome allowed a remote attacker who had compromised the GPU process to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...
SUSE CVE-2026-12033
Out of bounds read in VideoCapture in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the GPU process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...
EUVD-2026-36353
Out of bounds read in VideoCapture in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the GPU process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...