724 matches found
on-device-browser-agent
Local Browser - On-Device AI Web Automation Launching support for runanywhere-web-sdk soon in our main repo: please go check it out: https://github.com/RunanywhereAI/runanywhere-sdks A Chrome extension that uses WebLLM to run AI-powered web automation entirely on-device. No cloud APIs, no API key...
CVE-2026-43700
CVE-2026-43700 WebKit WebGPU importExternalTexture cross-origin information leak. Safari Red/Green/Blue/White Fixed version = 26.5.2: PATCHED importExternalTexture blocked: SecurityError Principle GPUDevice.importExternalTexturesource: HTMLVideoElement imports a video into a GPU-samplable . Befor...
CVE-2026-5281
⚡ CVE-2026-5281 - Chrome Dawn WebGPU Use-After-Free This vulnerability affected one of the clients we provide services to. This repository is our contribution to the original research: a centralized starting point for the group, so that if a similar vulnerability affecting this component appears...
CVE-2026-5281-Research-Toolkit
CVE-2026-5281 Research Toolkit Chrome WebGPU Use-After-Free CWE-416 This toolkit is for security research and defensive verification around CVE-2026-5281. Patched Chrome version: 146.0.7680.178 Potentially vulnerable versions: anything below 146.0.7680.178 Files cve20265281scanner.py Unified...
Updated firefox & nss packages fix security vulnerabilities
Sandbox escape in the Remote Settings Client component. CVE-2026-75874 Privilege escalation in the DOM: Workers component. CVE-2026-16365 Use-after-free in the JavaScript: GC component. CVE-2026-84118 Sandbox escape due to use-after-free in the DOM: Navigation component. CVE-2026-84119...
cve-2026-13934
CVE-2026-13934 This is the work project repository. Investigation, analysis, work, and reports are handled in one repo D088/D091. This file is the repository/board entry document. For the full folder and artifact conventions, see docs/conventions.md. The body status, conclusions, links is updated...
CVE-2026-2828-WebGPU-Cross-Origin-Pixel-Stealing-via-Timing
4. CVE-2026-2828 – WebGPU 타이밍 기반 교차 출처 픽셀 탈취 개요 악성 웹사이트는 WebGPU 컴퓨트 셰이더 타이밍을 사용하여 교차 출처 iframe의 렌더링 시간을 측정하고, 민감한 콘텐츠예: 은행 정보의 픽셀 값을 복구합니다. 심각도: 높음 정보 공개 데모 HTML/JS 단일 파일 root@kitploit: CVE-2026-2828 PoC WebGPU Side-Channel Leak The iframe below contains a secret code that we will leak...
CVE-2026-9034
Use After Free vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via WebGL or WebGPU, to access already freed...
CVE-2026-11891
Use After Free vulnerability in Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via WebGL or WebGPU, to access already freed memory. This issue affects Valhall GP...
EUVD-2026-72801
Use After Free vulnerability in Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via WebGL or WebGPU, to access already freed memory. This issue affects Valhall GP...
CVE-2026-11891
CVE-2026-11891 is a Use After Free vulnerability in the Arm Valhall GPU Userspace Driver and Arm 5th Gen GPU Architecture Userspace Driver , affecting versions r46p0 through r55p0 (specifically r46p0–r49p5, r50p0–r54p3, and r55p0). A non-privileged user process can trigger the bug by performing v...
CVE-2026-11891 Mali GPU Userspace Driver allows access to already freed memory
Use After Free vulnerability in Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via WebGL or WebGPU, to access already freed memory. This issue affects Valhall GP...
CVE-2026-9034 Mali GPU Userspace Driver allows access to already freed memory
Use After Free vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via WebGL or WebGPU, to access already freed...
EUVD-2026-72799
Use After Free vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via WebGL or WebGPU, to access already freed...
rendering-code-outside-the-sandbox-cve-2026-76036-dawn-webgpu-buffer-overflow-in-chrome-on-android
CVE-2026-76036 — Dawn WebGPU NPOT Depth/Stencil Mipmap Detection Harness Critical CVSS 9.6, CWE-122 heap buffer overflow in Dawn , Chromium's WebGPU implementation, in Google Chrome on Android prior to 151.0.7922.169 stable 151, released 2026-08-18. Root cause, per Dawn fix commit 178fb7048ad3: t...
SUSE CVE-2026-84123
Privilege escalation due to use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...
SUSE CVE-2026-84130
Information disclosure in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...
Linux Distros Unpatched Vulnerability : CVE-2026-84130
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information disclosure in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...