457 matches found
SUSE CVE-2026-121076
Use after free in WebXR in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-121076
An use after free flaw was found in the WebXR component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/578670966 Mitigation --- CME Mitigation Guidance 2026-11-04 --- Disclaimer: The following mitigation solutions are provided as a courtesy, pending the application of...
CVE-2026-121076
Use after free in WebXR in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
Linux Distros Unpatched Vulnerability : CVE-2026-121076
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in WebXR in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the...
DEBIAN-CVE-2026-121076
Use after free in WebXR in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-121076
Use after free in WebXR in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-121076
Use after free in WebXR in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-121076
Use after free in WebXR in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
EUVD-2026-116437
Use after free in WebXR in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-121076
A use after free flaw exists in the WebXR component of Google Chrome prior to version 157.0.8103.38 . A remote attacker could leverage social engineering to execute arbitrary code outside the sandbox by interacting with a crafted HTML page . This vulnerability is assigned a High security severity...
CVE-2026-121076: Google Chrome: Use after free in WebXR in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering…
Use after free in WebXR in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
PT-2026-136492
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A use after free issue exists in WebXR, which is an API that allows developers to create immersive virtual reality and augmented reality experiences. A remote attacker can leverage soci...
WebXR Interface Access Protected Information
The WebXR interface vulnerability in Google Chrome and Microsoft Edge is related to insufficient protection of sensitive data. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...
WebXR Interface Access Protected Information
The WebXR interface vulnerability in Google Chrome and Microsoft Edge is related to errors in variable initialization. Exploiting this vulnerability allows a remote attacker to gain access to protected information via a specially crafted HTML page...
WebXR Interface Access Protected Information
The WebXR interface vulnerability in Google Chrome and Microsoft Edge is related to the use of an uninitialized resource. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...
WebXR Interface Access Protected Information
The WebXR interface vulnerability in Google Chrome and Microsoft Edge is related to insufficient protection of sensitive data. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...
WebXR Interface Compromise Protected Information
The WebXR interface vulnerability in Google Chrome and Microsoft Edge is related to a flaw in the data source validation mechanism. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected information by using a specially crafted HTML page...
WebXR Interface Access Protected Information
The WebXR interface vulnerability in Google Chrome and Microsoft Edge is related to improper protection against attacks via external physical channels. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information by using a specially crafted HTML page...
WebXR interface DoS
The WebXR interface vulnerability in Google Chrome and Microsoft Edge is related to memory usage after it has been freed. Exploiting this vulnerability allows a remote attacker to cause a denial of service by using a specially crafted HTML page...
WebXR Interface Google Chrome Microsoft Edge
The WebXR interface vulnerability in Google Chrome and Microsoft Edge is related to reading beyond the permitted buffer boundaries of protected information. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information or cause a denial-of-service conditio...