CVE-2026-76034

Buffer overflow in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

EUVD-2026-61223

Buffer overflow in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-76034

A critical buffer overflow vulnerability exists in the WebGL component of Google Chrome (and other Chromium-based browsers like Opera and Microsoft Edge ) prior to version 151.0.7922.169 . A remote attacker can exploit this flaw via a crafted HTML page to execute arbitrary code outside the sandbo...

CVE-2026-76034

Buffer overflow in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

Google Chrome < 151.0.7922.169 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 151.0.7922.169. It is, therefore, affected by multiple vulnerabilities as referenced in the 202608stable-channel-update-for-desktop0826575033 advisory. - Use after free in WebGL in Google Chrome prior to 151.0.7922.169...

CVE-2026-76045: Use After Free

Use after free in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-76034: Heap-based Buffer Overflow

Buffer overflow in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

KLA91230 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution...

Stable Channel Update for Desktop

The Stable channel has been updated to 151.0.7922.169/.170 for Windows and Mac and 151.0.7922.169 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security Fixes and Rewards Note: Access to bug details and links may be kept...

PT-2026-77332

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.169 Description A use after free issue exists in WebGL, which allows a remote attacker to execute arbitrary code within the sandbox by inducing the victim to visit a specially crafted HTML page. Use...

PT-2026-77321

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.169 Description A buffer overflow exists in the WebGL component, which could allow a remote attacker to execute arbitrary code outside the sandbox by inducing the user to visit a specially crafted HTM...

Google Chrome < 151.0.7922.169 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 151.0.7922.169. It is, therefore, affected by multiple vulnerabilities as referenced in the 202608stable-channel-update-for-desktop0826575033 advisory. - Use after free in WebGL in Google Chrome prior to 151.0.7922.169...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101355)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101355 advisory. A compromised web process was able to trigger out of bounds reads and writes in a more privileged process using manipulated WebGL textures. This vulnerability was...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100920)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100920 advisory. A compromised web process was able to trigger out of bounds reads and writes in a more privileged process using manipulated WebGL textures. This vulnerability was...

Exploit for Improper Privilege Management in Google Chrome

CVE-2026-9999 — Chrome ANGLE/Metal WebGL PoC Hunting Harness...

CVE-2026-19170

A flaw was found in Google Chrome's WebGL component. A remote attacker could exploit a use-after-free vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially allow the attacker to perform a sandbox escape, breaking out of the browser's security protections...

CVE-2026-19170 Use after free in WebGL

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-19137 Use after free in WebGL

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Security update for chromium (critical)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2026:0281-1 Rating: critical References: 1274549 Cross-References: CVE-2026-19137 CVE-2026-19138 CVE-2026-19139 CVE-2026-19140 CVE-2026-19141 CVE-2026-19142 CVE-2026-19143 CVE-2026-19144 CVE-2026-19145...

Security update for chromium (critical)

openSUSE security update: security update for chromium ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21561-1 Rating: critical References: bsc1274549 Cross-References: CVE-2026-19137 CVE-2026-19138 CVE-2026-19139 CVE-2026-19140 CVE-2026-19141...