8680 matches found
CVE-2026-87491: Out-of-bounds Write
Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
Google Chromium V8 Out of Bounds Write Vulnerability
Google Chromium V8 contains an out of bounds write vulnerability that allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft...
Google Chrome < 153.0.8010.36 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 153.0.8010.36. It is, therefore, affected by multiple vulnerabilities as referenced in the 202609stable-channel-update-for-desktop0808145027 advisory. - Incorrect authorization in Extensions in Google Chrome prior to...
openSUSE 16 Security Update : chromium (openSUSE-SU-2026:21799-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21799-1 advisory. Changes in chromium: - Chromium 152.0.7977.82 boo1278683: CVE-2026-85046: Type confusion in V8 CVE-2026-85052: Out of bounds read in...
Google Chrome < 153.0.8010.36 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 153.0.8010.36. It is, therefore, affected by multiple vulnerabilities as referenced in the 202609stable-channel-update-for-desktop0808145027 advisory. - Incorrect authorization in Extensions in Google Chrome prior to...
Chromium: CVE-2026-84326 Uninitialized resource in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
PT-2026-88636
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue in V8 allows a remote attacker to execute arbitrary code inside the sandbox by using a crafted HTML page. Use after free is a memory corruption flaw that occurs...
VulnCheck KEV: CVE-2026-87491
Google Chromium V8 contains an out of bounds write vulnerability that allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft...
PT-2026-88589
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Memory corruption in V8, the open-source JavaScript and WebAssembly engine, allows a remote attacker to potentially execute arbitrary code inside the sandbox by using a crafted Chrome...
PT-2026-88664
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A type confusion issue exists in V8, the open-source JavaScript and WebAssembly engine. This allows a remote attacker to read memory inside the sandbox by inducing the browser to proces...
Fedora 43 : chromium (2026-c3be138e4c)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c3be138e4c advisory. Update to 152.0.7977.82 CVE-2026-85046: Type confusion in V8 CVE-2026-85052: Out of bounds read in CrashReporting CVE-2026-85043: Incomplete cleanup...
PT-2026-88712
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A type confusion issue exists in V8, the open-source JavaScript and WebAssembly engine. This allows a remote attacker to execute arbitrary code within the sandbox by inducing the user t...
PT-2026-88725
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue in V8 allows a remote attacker to execute arbitrary code inside the sandbox. This is achieved by leveraging social engineering and a crafted Chrome extension. Use...
PT-2026-88757
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue in V8 allows a remote attacker who has compromised the renderer process to read memory inside the sandbox by using a crafted HTML page. Use after free is a memory...
PT-2026-88687
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue in V8 allows a remote attacker to execute arbitrary code inside the sandbox by using a crafted HTML page. Use after free is a memory corruption flaw that occurs...
Security update for chromium (critical)
openSUSE security update: security update for chromium ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21799-1 Rating: critical References: bsc1278072 bsc1278683 Cross-References: CVE-2026-84323 CVE-2026-84324 CVE-2026-84325 CVE-2026-84326...
Stable Channel Update for ChromeOS / ChromeOS Flex
The Stable channel is being updated to OS version 16765.41.0 Browser version 152.0.7977.113 for most ChromeOS devices. If you find new issues, please let us know one of the following ways: 1. File a bug 2. Visit our ChromeOS communities 1. General: Chromebook Help Community 2. Beta Specific:...
PT-2026-88701
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A race condition in V8, the open-source JavaScript and WebAssembly engine, allows a remote attacker to execute arbitrary code within the sandbox by inducing the victim to open a special...
Minor update(10) for Vivaldi Android Browser 8.1
Head to the Google Play Store and download the browser. Alternatively, you can download Vivaldi from Uptodown, the Android app store. Your rating for our browser matters. ⭐️ ⭐️ ⭐️ ⭐️ ⭐️ Enjoy! Changelog The following is a list of changes since the ninth 8.1 minor update: Chromium Further update to...
JSCeal Malware Can Bypass Google Authentication Using Stolen Session Cookies
Cybersecurity researchers have unpacked JSCeal , a sophisticated compiled V8 JavaScript JSC malware with credential harvesting, surveillance, and traffic-interception capabilities. "The payloads are protected with javascript-obfuscator, using multiple techniques including RC4-protected strings,...