CVE-2026-19168

CVE-2026-19168 affects Google Chrome’s V8 engine. The flaw is an inappropriate implementation in V8 that could allow a remote attacker to execute arbitrary code inside Chrome’s sandbox via a crafted HTML page. The vulnerability is tied to Chrome versions before 151.0.7922.109; the Chrome stable r...

webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing.

A vulnerability was found in WebKitGTK and WPE WebKit that allows a remote attacker to conduct spoofing attacks by exploiting improper UI handling. This flaw enables attackers to create specially crafted websites that can display misleading information to users. By exploiting this vulnerability, ...