5430 matches found
CVE-2026-91747
Use after free in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...
CVE-2026-91747
A use after free vulnerability in Skia within Google Chrome (prior to version 153.0.8010.47 ) allows a remote attacker who has compromised the renderer process to obtain cross-origin data via a crafted HTML page. The Chromium security severity is rated as High . Remediation is available in update...
CVE-2026-91747
Use after free in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...
CVE-2026-91747: Use After Free
Use after free in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...
CVE-2026-91740: Use of Uninitialized Resource
Uninitialized resource in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...
CVE-2026-91746: Integer Overflow or Wraparound
Integer overflow in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...
CVE-2026-91730: Incomplete Cleanup
Incomplete cleanup in GetUserMedia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-91708: Time-of-check Time-of-use (TOCTOU) Race Condition
Race condition in Network in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...
PT-2026-93165
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description A use after free issue in Skia allows a remote attacker who has compromised the renderer process to obtain cross-origin data through a crafted HTML page. Use after free is a memory...
PT-2026-93126
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description A race condition in the Network component allows a remote attacker who has already compromised the renderer process to obtain cross-origin data by using a specially crafted HTML page. A...
PT-2026-93164
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description An integer overflow in the Compositing component allows a remote attacker to obtain cross-origin data by inducing a user to visit a crafted HTML page. Cross-origin data access occurs wh...
PT-2026-93158
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description An uninitialized resource in Skia allows a remote attacker to obtain cross-origin data by using a crafted HTML page. Skia is a 2D graphics library used for rendering text and images...
EUVD-2026-77514
Description Three separate mechanisms allowed a web page on an unrelated origin to read responses that Storm's HTTP components served to an authenticated user. The Logviewer reflected the request's Origin header back in Access-Control-Allow-Origin while also sending...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in Scroll in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to leak cross-origin data through a crafted HTML page...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in the Extensions API in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data through a crafted Chrome Extension. Chromium security severity: Low...
Astra Linux – Vulnerability in Chromium
The use of uninitialized variables in Skia in Google Chrome prior to version 149.0.7827.53 allowed a remote attacker to leak cross-origin data through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
Insufficient validation of untrusted input in the Permissions feature of Google Chrome prior to version 148.0.7778.96 allowed an attacker on the local network segment to leak cross-origin data through malicious network traffic. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
Insufficient policy enforcement in Background Fetch in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to leak cross-origin data through a crafted HTML page...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to obfuscate main origin data via a crafted HTML page. Chromium security severity: Medium...