CVE-2026-10982

CVE-2026-10982 : A use-after-free in WebXR within Google Chrome before 149.0.7827.53 allows remote code execution via a crafted HTML page in a sandbox. Affected component is WebXR in Chrome/Chromium; root cause is use-after-free. Impact is high (arbitrary code execution, sandbox break). No exploi...

CVE-2026-9995

Use after free in WebXR in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2025-12443

CVE-2025-12443 corresponds to an out-of-bounds read in WebXR in Google Chrome/Chromium. The issue allows a remote attacker to perform an out-of-bounds memory read via a crafted HTML page. Affected component: WebXR in Chromium-based Chrome; root cause: out-of-bounds read in WebXR implementation. I...

KLA89876 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to spoof user interface, cause denial of service, execute arbitrary code, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Incorrect security UI vulnerability i...

Linux Distros Unpatched Vulnerability : CVE-2025-12443

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds read in WebXR in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

EUVD-2020-7947

Malware in sbrugna...

CVE-2022-0809

Out of bounds memory access in WebXR in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

The vulnerability of the WebXR components in Google Chrome and Microsoft Edge browsers allows a hacker to trigger a service failure.

The vulnerability of the WebXR components in Google Chrome and Microsoft Edge relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

chromium-browser: Use after free in WebXR

Use after free in WebXR in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Google Chrome Code Execution Vulnerability (CNVD-2020-49874)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in WebXR in versions prior to Google Chrome 84.0.4147.125. An attacker can exploit this vulnerability to execute arbitrary code or cause a denial of service...