CVE-2026-11645

CVE-2026-11645 - Google ChromeのV8におけるリモートコード実行脆弱性 簡単な使い方 root@kitploit: python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe 悪用に関する注意点 重要度: HIGH CVSS: 8.8 影響: 機密性、完全性、可用性 公開日: 2026-06-09 技術概要 Google Chrome...

CVE-2026-87654

A flaw was found in Chromium's ANGLE component. A remote attacker could exploit a buffer overflow vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to the execution of arbitrary code outside the browser's security sandbox, potentially compromising the affect...

CVE-2026-87646

A flaw was found in Google Chrome's Web Authentication component. A remote attacker could exploit a use-after-free vulnerability by tricking a user into visiting a specially crafted HTML page. This could lead to the execution of arbitrary code outside of the browser's security sandbox...

CVE-2026-87643

A flaw was found in Google Chrome. An integer overflow vulnerability exists in the Graphics Processing Unit GPU. A remote attacker could exploit this by enticing a user to visit a specially crafted HTML page. This could potentially lead to arbitrary code execution outside of the browser's securit...

CVE-2026-87637

A flaw was found in Chromium, specifically within the Extensions component. This use-after-free vulnerability allows a remote attacker to execute arbitrary code outside of the sandbox by enticing a user to visit a specially crafted HTML page. This could lead to significant compromise of the...

CVE-2026-87638

A flaw was found in Google Chrome's Media component. A remote attacker could exploit an out-of-bounds write vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially allow the attacker to execute arbitrary code outside of the browser's security sandbox...

CVE-2026-87548

A flaw was found in the Installer component of Google Chrome. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page. This improper state validation could allow the attacker to bypass system access restrictions, potentially leading to...

CVE-2026-87474

A flaw was found in Google Chrome. A use-after-free vulnerability in the Payments component could allow a remote attacker to execute arbitrary code outside of the browser's security sandbox. This exploitation is possible by enticing a user to visit a specially crafted HTML page...

CVE-2026-87464

A flaw was found in WebGL within Google Chrome. This use-after-free vulnerability allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. Exploitation occurs when a user visits a specially crafted HTML page, leading to a critical security compromise...

CVE-2026-87455

A flaw was found in Aura in Google Chrome. A remote attacker could exploit a use-after-free vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially allow the attacker to execute arbitrary code outside of the browser's security sandbox...

CVE-2026-84354

A flaw was found in Google Chrome's FileSystem component. A remote attacker could exploit this vulnerability by leveraging social engineering techniques to trick a user into opening a specially crafted HTML page. This could lead to the execution of arbitrary code outside of the browser's security...

ROS-20260911-73-0107

The vulnerability of the USB component in Google Chrome and Microsoft Edge browsers is related to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause service interruptions through a specially created HTML...

ROS-20260910-73-0153

The vulnerability of the Paint component in Google Chrome and Microsoft Edge relates to the user interface’s false representation of critical information. Exploiting this vulnerability allows a remote attacker to compromise data integrity through a specially created HTML page...

CVE-2026-87624

A flaw was found in Google Chrome on Android. A remote attacker, after compromising the renderer process, could exploit a user interface UI misrepresentation vulnerability. This vulnerability allows the attacker to spoof UI elements by using a specially crafted HTML page, potentially deceiving...

CVE-2026-87630

A flaw was found in WebRTC in Chromium-browser. A remote attacker could exploit an integer overflow vulnerability by enticing a user to visit a specially crafted HTML page. This could allow the attacker to read sensitive memory within the browser's sandbox environment...

CVE-2026-87521

A flaw was found in WebMCP in Chromium. A remote attacker, after compromising the renderer process, could exploit this vulnerability by crafting a malicious HTML page. This could lead to an information leak, allowing the attacker to obtain sensitive cross-origin data...

CVE-2026-87451

A flaw was found in Google Chrome. This information leak vulnerability in the Downloads component allows a remote attacker, who has already compromised the browser's renderer process, to obtain sensitive cross-origin data. This can be achieved by enticing a user to visit a specially crafted HTML...

CVE-2026-87439

A flaw was found in chromium-browser's ServiceWorker. A remote attacker, who has already compromised the renderer process, could exploit this vulnerability by providing a specially crafted HTML page. This could lead to an information leak, allowing the attacker to obtain sensitive information...

CVE-2026-87453

A flaw was found in chromium-browser's BackgroundFetch component. A remote attacker, who has already compromised the renderer process, could exploit a confused deputy vulnerability by using a specially crafted HTML page. This could lead to the disclosure of sensitive information...

CVE-2026-87538

A flaw was found in Chromium. A remote attacker, after compromising the renderer process and leveraging social engineering, could exploit a clickjacking vulnerability in the input mechanism. This could allow the attacker to spoof user interface UI elements via a specially crafted HTML page,...