CVE-2026-76020

A race condition in the V8 engine of Google Chrome (prior to version 151.0.7922.173) allows a remote attacker to execute arbitrary code inside the sandbox through a crafted HTML page. This vulnerability has been addressed in various distributions, including Debian 12 (version 151.0.7922.173-1~deb...

Exploit for Type Confusion in Google Chrome

CVE-2024-4947 — V8 Maglev Type Confusion → Full RCE d8 PoC...

PT-2026-79128

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.173 Description A race condition in the V8 engine allows a remote attacker to execute arbitrary code within the sandbox by inducing the victim to open a specially crafted HTML page. A race condition...

CVE-2026-76020: Time-of-check Time-of-use (TOCTOU) Race Condition

Race condition in V8 in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

KLA91237 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Denial of service vulnerabili...

KLA91245 Multiple vulnerabilities in Opera

Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in V8 can be exploited remotely to execute arbitrary code. 2. A...

KLA91233 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Chromoting can be...

Stable Channel Update for Desktop

The Stable channel has been updated to 151.0.7922.173/.174 for Windows and Mac and 151.0.7922.173 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security Fixes and Rewards Note: Access to bug details and links may be kept...

CVE-2026-69222 LiquidJS: Uncontrolled Resource Consumption in `join` filter allows template authors to bypass `memoryLimit` and crash the process

LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to 10.27.2, the join filter in src/filters/array.ts computes complexity from array.length and separator length instead of the total string length produced by array.joinsep. The concat filter can cheaply doub...

Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second

Cybersecurity researchers have disclosed details of a remote Spectre attack against Cloudflare Workers that leaked a JSON Web Token JWT from a co-located Worker in the production environment at up to 12 bits per second, 360 times the rate of an earlier attack demonstrated in 2021. The end-to-end...

MINI-V8G4-5VGQ-88RR

Bulletin has no description...

CVE-2026-76047

A flaw was found in chromium-browser. A remote attacker could exploit a type confusion vulnerability in the V8 JavaScript engine by enticing a user to visit a specially crafted HTML page. This could allow the attacker to execute arbitrary code within the browser's sandbox, potentially compromisin...

CVE-2026-76038

A flaw was found in V8, the open-source JavaScript engine used in Google Chrome. This type confusion vulnerability allows a remote attacker to execute arbitrary code within the browser's security sandbox. Exploitation occurs when a user visits a specially crafted HTML page, leading to potential...

CVE-2026-76043

A flaw was found in the V8 component of Google Chrome. A remote attacker could exploit an incorrect calculation vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to arbitrary code execution within the browser's sandbox environment...

CVE-2026-76039

creationtimestamp| type| source ---|---|--- 2026-08-19 04:47:56+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260819 2026-09-16 04:46:46+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260916...

CVE-2026-76044

creationtimestamp| type| source ---|---|--- 2026-08-19 04:47:47+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260819 2026-08-24 04:45:06+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260824...

CVE-2026-76041

creationtimestamp| type| source ---|---|--- 2026-08-19 04:47:40+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260819 2026-08-24 04:46:31+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260824...

CVE-2026-76037

creationtimestamp| type| source ---|---|--- 2026-08-19 04:47:31+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260819 2026-08-24 04:46:24+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260824 2026-08-24...

CVE-2026-76035

creationtimestamp| type| source ---|---|--- 2026-08-19 04:47:26+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260819 2026-08-19 15:00:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtgyobtpq325 2026-08-21 01:40:09+00:00| seen|...

CVE-2026-76033

creationtimestamp| type| source ---|---|--- 2026-08-19 04:47:21+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260819 2026-08-24 04:45:11+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260824 2026-08-24...