CVE-2026-17656

Use after free in Ozone in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

Astra Linux – Vulnerability in Chromium

The use of after-free in Skia in Google Chrome before version 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...

CVE-2026-11282

Google Chrome on Linux (prior to version 149.0.7827.53 ) is vulnerable to a sandbox escape due to insufficient policy enforcement. A remote attacker can exploit this by navigating the victim to a crafted HTML page . While the Chromium security severity is rated as Low , the CVSS 3.1 score is 9.6 ...

Google Chrome 输入验证错误漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.53 had a vulnerability related to input validation errors. This vulnerability stemmed from insufficient input validation in Dawn’s security measures, which could allow remote attackers to escape...

Google Chrome 输入验证错误漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.53 had a vulnerability related to input validation. This vulnerability stemmed from insufficient input validation in the WebNN component, which could allow a remote attacker with access to a...

The vulnerability of the Portals components in Google Chrome and Microsoft Edge allows a hacker to escape from an isolated software environment.

The vulnerability of the Portals components in Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to escape from an isolated software environment remotely...

CVE-2017-7972: Undefined Security Weakness

A vulnerability exists in Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and PowerSCADA Expert v8.2 and Citect Anywhere version 1.0 that allows the ability to escape out of remote PowerSCADA Anywhere applications and launch other processes...

CVE-2000-0327: Undefined Security Weakness

Microsoft Virtual Machine VM allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cast operation, aka the "Virtual Machine Verifier" vulnerability...