CVE-2026-9902

Use after free in Accessibility in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-9894

A use after free vulnerability exists in the GPU components of Google Chrome prior to version 148.0.7778.216 . A remote attacker who has already compromised the renderer process can exploit this resource management flaw to potentially perform a sandbox escape by navigating to a specially crafted ...

CVE-2026-9874

Use after free in Dawn in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-9873

Use after free in Network in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Critical...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.216 contained a resource management vulnerability. This vulnerability stemmed from the Base component’s ability to be reused after being released, potentially allowing remote attackers to execute...

CVE-2026-9116

Insufficient policy enforcement in ServiceWorker in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

The vulnerability of WebRTC technology in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code.

The vulnerability of WebRTC technology in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created HTML page...

CVE-2026-8604

In ScadaBR version 1.2.0, a CSRF vulnerability could allow an attacker to trigger any authenticated action through a victim's session by luring any logged-in user to a malicious webpage...

PT-2026-41990

Name of the Vulnerable Software and Affected Versions ScadaBR version 1.2.0 Description A Cross-Site Request Forgery CSRF issue allows an attacker to trigger authenticated actions via a victim's session by tricking a logged-in user into visiting a malicious webpage. CSRF is a technique where a...

CVE-2026-8604: Cross-Site Request Forgery (CSRF)

In ScadaBR version 1.2.0, a CSRF vulnerability could allow an attacker to trigger any authenticated action through a victim's session by luring any logged-in user to a malicious webpage...

The vulnerability of the Canvas component in Google Chrome and Microsoft Edge browsers allows attackers to bypass existing security mechanisms.

The vulnerability of the Canvas component in Google Chrome and Microsoft Edge is related to insecure management of privileges. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms through a specially created HTML page...

ROS-20260515-73-0035

A vulnerability in the TextEncoding component of Google Chrome and Microsoft Edge browser is related to memory usage after it has been freed. Exploitation of the vulnerability could allow a remote attacker to cause a denial of service via a specially crafted HTML page as a result of a user...

CVE-2026-8577

An integer overflow vulnerability in the Fonts component of Google Chrome (and Microsoft Edge ) prior to version 148.0.7778.168 allows a remote attacker to execute arbitrary code inside a sandbox via a specially crafted HTML page. This issue may also result in service interruptions or denial of s...

CVE-2026-8568

CVE-2026-8568 is a Chromium/Google Chrome vulnerability described as insufficient policy enforcement in AI, allowing a renderer process–level attacker to bypass Site Isolation via a crafted HTML page. Reports cite remote code execution, DoS, or information disclosure as potential impacts. Debian ...

CVE-2026-8548

Out of bounds write in Media in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-8558

Out of bounds write in Fonts in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-8516

Insufficient validation of untrusted input in DataTransfer in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in specific UI gestures to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity:...

PT-2026-41072

Name of the Vulnerable Software and Affected Versions Google Chrome on Mac versions prior to 148.0.7778.168 Description An out of bounds read in FileSystem allows a remote attacker to obtain potentially sensitive information from process memory. This occurs when a user is convinced to perform...

webkitgtk: A maliciously crafted webpage may be able to fingerprint the user

A flaw was found in WebKitGTK. A maliciously crafted web page can cause an authorization issue due to improper state management and may be able to fingerprint the user...

PT-2026-54354

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description Insufficient policy enforcement in the Network component allows a remote attacker to bypass the same origin policy, which is a security mechanism that restricts how a document or script...