on-device-browser-agent

Local Browser - On-Device AI Web Automation Launching support for runanywhere-web-sdk soon in our main repo: please go check it out: https://github.com/RunanywhereAI/runanywhere-sdks A Chrome extension that uses WebLLM to run AI-powered web automation entirely on-device. No cloud APIs, no API key...

CVE-2026-5281-Research-Toolkit

CVE-2026-5281 研究工具包 Chrome WebGPU 释放后使用（CWE-416） 本工具包用于围绕 CVE-2026-5281 进行安全研究和防御性验证。 已修补的 Chrome 版本：146.0.7680.178 可能存在漏洞的版本：低于 146.0.7680.178 的任何版本 文件 cve20265281scanner.py 用于本机检查、机群 CSV 检查和日志分类的统一扫描器。 cve20265281exploit.py PoC 工件生成器（为实验室测试创建 HTML/JSON/JS 等文件）。 环境要求 Windows PowerShell 或终端 Pytho...

cve-2026-13934

CVE-2026-13934 这是工作项目仓库。调查·分析·工作·报告都在一个仓库中 处理D088/D091。 此文件是仓库·看板入口文档 。文件夹·产出物规范的全文请参阅 docs/conventions.md。 正文现状·结论·链接在报告report条目晋升时更新。 调查·分析·工作代理不会修改根 README。 一句话摘要 : Google Chrome 的 WebGPU 实现 Dawn 在创建 YCbCr 采样器时未检查 Vulkan 规范所要求的参数约束,导致已掌握渲染器进程的攻击者可将违反规范的值一路传送到 GPU 进程CWE-20。修复以两层 方式加入验证与后端强制,并已在...

CVE-2026-2828-WebGPU-Cross-Origin-Pixel-Stealing-via-Timing

4. CVE-2026-2828 – WebGPU Cross‑Origin Pixel Stealing via Timing Overview A malicious website uses WebGPU compute shader timing to measure rendering time of a cross‑origin iframe, recovering pixel values of sensitive content e.g., banking details. Severity: High Information Disclosure...

rendering-code-outside-the-sandbox-cve-2026-76036-dawn-webgpu-buffer-overflow-in-chrome-on-android

CVE-2026-76036 — Dawn WebGPU NPOT 深度/模板 Mipmap 检测框架 在 Dawn （Chromium 的 WebGPU 实现）中存在严重（CVSS 9.6，CWE-122）堆缓冲区溢出漏洞，影响 Android 上早于 151.0.7922.169 的 Google Chrome （稳定版 151，发布于 2026-08-18）。 根据 Dawn 修复提交 178fb7048ad3，根本原因是：PowerVR 专有 Vulkan 驱动会错误计算非二次幂（NPOT）深度/模板纹理的 mip 层级大小 。在受影响硬件上，网页调用...

Astra Linux – Vulnerability in Firefox

Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 145 and Thunderbird 145...

Astra Linux – Vulnerability in Firefox

Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 145 and Thunderbird 145...

CVE-2026-43700

CVE-2026-43700 WebKit WebGPU importExternalTexture cross-origin information leak. Safari Red/Green/Blue/White Fixed version = 26.5.2: PATCHED importExternalTexture blocked: SecurityError Principle GPUDevice.importExternalTexturesource: HTMLVideoElement imports a video into a GPU-samplable . Befor...

CVE-2026-5281

⚡ CVE-2026-5281 - Chrome Dawn WebGPU Use-After-Free This vulnerability affected one of the clients we provide services to. This repository is our contribution to the original research: a centralized starting point for the group, so that if a similar vulnerability affecting this component appears...

Updated firefox & nss packages fix security vulnerabilities

Sandbox escape in the Remote Settings Client component. CVE-2026-75874 Privilege escalation in the DOM: Workers component. CVE-2026-16365 Use-after-free in the JavaScript: GC component. CVE-2026-84118 Sandbox escape due to use-after-free in the DOM: Navigation component. CVE-2026-84119...

CVE-2026-9034

Use After Free vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via WebGL or WebGPU, to access already freed...

CVE-2026-11891

Use After Free vulnerability in Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via WebGL or WebGPU, to access already freed memory. This issue affects Valhall GP...

EUVD-2026-72801

Use After Free vulnerability in Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via WebGL or WebGPU, to access already freed memory. This issue affects Valhall GP...

CVE-2026-11891 Mali GPU Userspace Driver allows access to already freed memory

Use After Free vulnerability in Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via WebGL or WebGPU, to access already freed memory. This issue affects Valhall GP...

CVE-2026-11891

CVE-2026-11891 is a Use After Free vulnerability in the Arm Valhall GPU Userspace Driver and Arm 5th Gen GPU Architecture Userspace Driver , affecting versions r46p0 through r55p0 (specifically r46p0–r49p5, r50p0–r54p3, and r55p0). A non-privileged user process can trigger the bug by performing v...

CVE-2026-9034 Mali GPU Userspace Driver allows access to already freed memory

Use After Free vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via WebGL or WebGPU, to access already freed...

EUVD-2026-72799

Use After Free vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via WebGL or WebGPU, to access already freed...

SUSE CVE-2026-84123

Privilege escalation due to use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

SUSE CVE-2026-84130

Information disclosure in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

Linux Distros Unpatched Vulnerability : CVE-2026-84130

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information disclosure in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...