CVE-2026-102315

Uninitialized resource in Media in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-89401

Incorrect authorization in WebView in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-102327

An incorrect authorization flaw exists in the WebView component of Google Chrome on Android prior to version 154.0.8037.92 . This vulnerability allows a remote attacker who has already compromised the renderer process to potentially execute arbitrary code outside the sandbox by serving a crafted ...

CVE-2026-102327

Incorrect authorization in WebView in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-89393

Use after free in PictureInPicture in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-102311

Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-95319

A flaw was found in chromium-browser. A use-after-free memory corruption flaw in the printing component allows a remote attacker who has already compromised the renderer process to escape the browser sandbox and potentially execute arbitrary code on the host system. To exploit this vulnerability,...

CVE-2026-95298

A flaw was found in chromium-browser. A use-after-free vulnerability, where memory is improperly accessed after being released, exists within the browser process. A local attacker can exploit this flaw through specific user interface UI interactions to potentially execute arbitrary code outside t...

CVE-2026-95335

A flaw was found in chromium-browser. A use-after-free vulnerability in the Human Interface Device HID component allows a remote attacker to execute arbitrary code outside the browser sandbox. By convincing a user to visit a specially crafted web page, an attacker who has already compromised the...

CVE-2026-95322

A flaw was found in chromium-browser. An out-of-bounds write vulnerability in the graphics processing unit GPU component allows a remote attacker to execute arbitrary code outside the browser sandbox. By enticing a user to view a specially crafted HTML page, an attacker who has already compromise...

CVE-2026-95348

A flaw was found in chromium-browser. A use-after-free memory corruption issue exists within the Bluetooth component. A remote attacker who has already compromised the renderer process could exploit this vulnerability by convincing a user to load a crafted HTML page. Successful exploitation could...

CVE-2026-95311

A flaw was found in chromium-browser. A remote attacker could execute arbitrary code outside the browser sandbox by convincing a user to open a crafted HTML page. This vulnerability occurs because the Fonts component improperly attempts to deallocate memory that was not dynamically allocated on t...

CVE-2026-95355

Incorrect authorization in Navigation in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-95348

Use after free in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-95274

Improper output encoding in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CrackKeyIso

CVE 2023 28229 Windows CNG KeyIso RPC EoP/SBX Descubierto por: @k0shl - @Y3A ¡Solo con fines educativos!...

WPTaskScheduler_CVE-2024-49039

Persistencia de WPTaskScheduler y CVE-2024-49039, como una superficie de ataque dentro del Programador de tareas. WPTaskScheduler.dll es un componente del Programador de tareas desde Windows 10 1507. Probablemente se trata de una herramienta de puerta trasera utilizada para la persistencia, que f...

CVE-2026-40217-PoC

CVE-2026-40217 — LiteLLM 防护沙箱逃逸 LiteLLM POST /guardrails/testcustomcode — 沙箱逃逸导致默认 Docker 部署中 root 权限下的远程代码执行 RCE 。 字段| 值 ---|--- CVE| CVE-2026-40217 CVSS| 8.8 高 — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CWE| CWE-913（对动态管理代码资源控制不当）/ CWE-94 受影响版本| LiteLLM ≤ 2026-04-08 （低于 v1.83.11） 修复版本|...

CVE-2026-95334

Incorrect reference resolution in WebProtect in Google Chrome prior to...

EUVD-2026-89150

Incorrect reference resolution in WebProtect in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...