CVE-2020-6418

CVE-2020-6418 The CVE 2020-6418 is about the the type confusion in V8 in Google chrome.The affected versions were prior to 80.0.3987.122. The vulnerability is achived by remote attacker accessing the shell of a target device via a crafted HTML page. Environment Requirements 1. Google Chrome with...

CVE-2021-30573

CVE 2021-30573 Google Chrome 취약점 CVE-2021-30573 Google Chrome의 GPU에서 use-after-free 취약점으로 인해 원격 공격자가 조작된 HTML 페이지를 통해 힙 손상을 악용할 수 있었습니다. CVE-2021-30573 세부정보 취약한 버전: 이 버그는 Google Chrome 91 이하 버전에서 작동합니다. 92+ 92.0.4515.107에서 패치되었습니다. 사용 방법: 오래된 Chrome에서 exploit.html을 실행하기만 하면 됩니다. 참고 자료...

CVE-2026-11645-Out-of-bounds-Read-Write

CVE-2026-11645 - Chrome V8 Out-of-Bounds Read/Write Exploit ⚠️ 경고 이 코드는 교육 목적 및 승인된 테스트 전용입니다. 📋 설명 CVE-2026-11645는 Google Chrome의 V8 엔진에서 경계를 넘는 읽기 및 쓰기OOB 취약점입니다. 원격 공격자는 조작된 HTML 페이지를 통해 샌드박스 내에서 임의 코드를 실행할 수 있습니다. 기술 세부사항 필드| 값 ---|--- CVE| CVE-2026-11645 CVSS| 8.8 High 벡터|...

CVE-2026-11645

CVE-2026-11645 - V8 in Google Chrome prior to Remote Code Execution Quick Usage python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe Exploitation Notes Severity: HIGH CVSS: 8.8 Impact: Confidentiality, Integrity, Availability Published: 2026-06-09 Technical Summary Out...

CVE-2026-103626

A flaw was found in the FileSystem component of Google Chrome. Due to an incorrect authorization issue, a remote attacker can execute arbitrary code outside the browser sandbox by tricking a user into interacting with a specially crafted HTML page. This escape from the browser's restricted securi...

Linux Distros Unpatched Vulnerability : CVE-2026-103626

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in FileSystem in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker leveraging social engineering to potential...

DEBIAN-CVE-2026-103627

Information leak in SVG in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-91716

Information leak in SVG in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-103627

Information leak in SVG in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-103631

Google Chrome versions prior to 154.0.8037.97 are vulnerable to a heap-based buffer overflow in WebRTC . A remote attacker can exploit this vulnerability by serving a crafted HTML page to execute arbitrary code inside the browser sandbox. This issue was reported by Xinyang Ge and is addressed in ...

CVE-2026-103627

Information leak in SVG in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-103626

Incorrect authorization in FileSystem in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

Google Chrome < 154.0.8037.97 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 154.0.8037.97. It is, therefore, affected by multiple vulnerabilities as referenced in the 202610stable-channel-update-for-desktop advisory. - Use after free in FedCM in Google Chrome prior to 154.0.8037.97 allowed a remo...

CVE-2026-95288

A flaw was found in Google Chrome on iOS. A remote attacker could exploit this vulnerability by enticing a user to load a specially crafted HTML page. Successful exploitation allows the attacker to spoof user interface UI elements, potentially misleading users into trusting deceptive content...

CVE-2026-102305

An ui misrepresentation flaw was found in the SignIn component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=533021953 https://code.google.com/p/chromium/issues/detail?id=102305...

PT-2026-104387

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 154.0.8037.97 Description An information leak exists in the Scalable Vector Graphics SVG component, which allows a remote attacker to obtain sensitive information by inducing a user to visit a specially crafted...

chromium-browser: skia: chromium-browser: skia: Arbitrary code execution via crafted HTML page

A flaw was found in Skia, a 2D graphics library. A remote attacker, who has already compromised the renderer process, could exploit a use-after-free vulnerability by providing a specially crafted HTML page. This could lead to the execution of arbitrary code within the sandbox environment,...

chromium-browser: angle: ANGLE Out-of-Bounds Write Vulnerability

A flaw was found in chromium-browser. An out-of-bounds write vulnerability exists within the ANGLE graphics component, allowing a remote attacker to trigger out-of-bounds memory access by providing a specially crafted HTML page. This allows an attacker to potentially manipulate memory contents. T...

chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia

An inappropriate implementation flaw was found in Skia in Google Chrome. This issue may allow a remote attacker to compromise the renderer process to perform a sandbox escape via a crafted HTML page...

chromium-browser: angle: ANGLE: Remote code execution via crafted HTML page

A flaw was found in ANGLE, a component used in Google Chrome. A remote attacker could exploit an out-of-bounds write vulnerability by tricking a user into visiting a specially crafted HTML page. This could potentially allow the attacker to execute arbitrary code outside of the browser's security...