CVE-2026-93379

A flaw was found in Google Chrome. This incorrect authorization vulnerability in the Object Request Broker ORB component allows a remote attacker to bypass site isolation. By crafting a malicious HTML page, an attacker can exploit this flaw, potentially leading to unauthorized access to sensitive...

CVE-2026-93378

A flaw was found in Google Chrome. A remote attacker who had compromised the renderer process could exploit missing authorization in the Storage component via a crafted PDF file. This could allow them to bypass site isolation, potentially leading to unauthorized access to data or further system...

CVE-2019-5786

CVE-2019-5786 Chrome 72.0.3626.119 稳定版 FileReader UaF 漏洞利用，适用于 Windows 7 x86。 该漏洞利用站点隔离机制来暴力破解漏洞。iframe.html 是包装脚本，负责将其他文件中的漏洞利用代码反复加载到 iframe 中。 将 iframe.html 托管在一个站点上，将 exploit.html、exploit.js 和 wokrer.js 托管在另一个站点上。将 iframe.html 中第 13 行的地址修改为 exploit.html 的 URL。 使用 --no-sandbox 参数启动 Chrome。...

Trespasser

CVE-2026-74970 · Firefox Fission site-isolation bypass via missing PipelineId namespace check This directory holds an honest reproduction scaffold for a Fission site-isolation authorization bypass in Firefox WebRender. Under Fission each content process owns a distinct PipelineId namespace, but t...

CVE-2019-0808

CVE-2019-5786 および CVE-2019-0808 Chrome 72.0.3626.119 安定版 Windows 7 x86 エクスプロイトチェーン。 このエクスプロイトは、サイト分離を使用して CVE-2019-5786 をブルートフォースします。 host1wrapper/iframe.html は、エクスプロイトを iframe に繰り返し読み込むラッパースクリプトです。実際のチェーンは host2singlerun ディレクトリにあります。CVE-2019-0808 のサンドボックスエスケープエクスプロイトは、ファイル...

CVE-2026-93379

Incorrect authorization in ORB in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: High...

Linux Distros Unpatched Vulnerability : CVE-2026-93379

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in ORB in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium...

Linux Distros Unpatched Vulnerability : CVE-2026-93378

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Storage in Google Chrome prior to 153.0.8010.52 allowed a remote attacker who had compromised the renderer process to bypass site...

DEBIAN-CVE-2026-93378

Missing authorization in Storage in Google Chrome prior to 153.0.8010.52 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. Chromium security severity: Medium...

CVE-2026-93378

Missing authorization in Storage in Google Chrome prior to 153.0.8010.52 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. Chromium security severity: Medium...

DEBIAN-CVE-2026-93379

Incorrect authorization in ORB in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: High...

CVE-2026-93379

Incorrect authorization in ORB in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: High...

CVE-2026-93378

Missing authorization in Storage in Google Chrome prior to 153.0.8010.52 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. Chromium security severity: Medium...

CVE-2026-93378

Missing authorization in Storage in Google Chrome prior to 153.0.8010.52 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. Chromium security severity: Medium...

CVE-2026-93378

CVE-2026-93378 is a missing authorization flaw in the Storage component of Google Chrome prior to 153.0.8010.52 . A remote attacker who had already compromised the renderer process could bypass site isolation by exploiting a crafted PDF file . Chromium rated the severity as Medium . CISA SSVC ass...

EUVD-2026-82488

Missing authorization in Storage in Google Chrome prior to 153.0.8010.52 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. Chromium security severity: Medium...

CVE-2026-93378

Missing authorization in Storage in Google Chrome prior to 153.0.8010.52 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. Chromium security severity: Medium...

CVE-2026-93379

Incorrect authorization in ORB in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: High...

CVE-2026-93379

CVE-2026-93379 is an incorrect authorization flaw in the ORB (Object Request Broker) component of Google Chrome prior to version 153.0.8010.52 . A remote attacker can exploit it via a crafted HTML page to bypass site isolation , rated High severity by Chromium. The fix ships in Chrome/Chromium 15...

CVE-2026-93379

Incorrect authorization in ORB in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: High...