159 matches found
CVE-2026-4675
Heap buffer overflow in WebGL in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: High...
Fedora 44 : chromium (2026-920df14fb5)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-920df14fb5 advisory. Update to 146.0.7680.153 CVE-2026-4439: Out of bounds memory access in WebGL CVE-2026-4440: Out of bounds read and write in WebGL CVE-2026-4441: Use...
Security update for chromium (important)
openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2026:0093-1 Rating: important References: 1259964 Cross-References: CVE-2026-4439 CVE-2026-4440 CVE-2026-4441 CVE-2026-4442 CVE-2026-4443 CVE-2026-4444 CVE-2026-4445 CVE-2026-4446 CVE-2026-4447 CVE-2026-4448...
Google Chrome < 146.0.7680.164 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 146.0.7680.164. It is, therefore, affected by multiple vulnerabilities as referenced in the 202603stable-channel-update-for-desktop23 advisory. - Use after free in FedCM in Google Chrome prior to 146.0.7680.165 allowed a...
SUSE CVE-2026-4440
Out of bounds read and write in WebGL in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. Chromium security severity: Critical...
EUVD-2026-13447
Out of bounds read and write in WebGL in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. Chromium security severity: Critical...
CVE-2026-4440
CVE-2026-4440 involves an out-of-bounds read/write in WebGL in Google Chrome/Chromium prior to 146.0.7680.153, enabling a remote attacker to perform arbitrary read/write via a crafted HTML page. Connected feeds indicate Chromium/Chromium-derived updates (e.g., 146.0.7680.164 in Fedora advisories ...
CVE-2026-4440
Out of bounds read and write in WebGL in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. Chromium security severity: Critical...
CVE-2026-4439
The CVE-2026-4439 entry describes an out-of-bounds memory access in WebGL affecting Google Chrome on Android prior to version 146.0.7680.153, with potential sandbox escape via a crafted HTML page (critical). Connected advisories confirm Chromium-based builds (Chromium/Chrome) across distributions...
CVE-2026-4439
Out of bounds memory access in WebGL in Google Chrome on Android prior to 146.0.7680.153 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...
Google Chrome < 146.0.7680.153 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 146.0.7680.153. It is, therefore, affected by multiple vulnerabilities as referenced in the 202603stable-channel-update-for-desktop18 advisory. - Use after free in Extensions in Google Chrome prior to 146.0.7680.153...
CVE-2026-4440
Out of bounds read and write in WebGL in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. Chromium security severity: Critical...
PT-2026-26511
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 146.0.7680.153 Microsoft Edge affected versions not specified Description An out-of-bounds read and write issue exists in the WebGL component, which is a JavaScript API used for rendering 2D and 3D graphics in w...
The vulnerabilities of Canvas and WebGL interfaces in Mozilla Firefox, Firefox ESR, and the email client Thunderbird allow attackers to bypass the sandboxing protection mechanisms.
The vulnerability of Canvas and WebGL interfaces in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a remote attacker to bypass the sandboxing protection mechanisms...
Security Vulnerabilities fixed in Firefox ESR 140.4 — Mozilla
Use-after-free in MediaTrackGraphImpl::GetInstance A compromised web process was able to trigger out of bounds reads and writes in a more privileged process using manipulated WebGL textures. A compromised web process using malicious IPC messages could have caused the privileged browser process to...
EUVD-2012-5716
Malware in sbrugna...
EUVD-2015-0843
Malware in sbrugna...
EUVD-2020-27704
Malware in sbrugna...