Search: 20.chromium

Memory corruption in Autofill in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Use after free in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Memory corruption in MediaStream in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

A use-after-free vulnerability in Chromium-based Microsoft Edge allows an unauthorized attacker to elevate privileges over a network. The flaw can lead to complete compromise of confidentiality, integrity, and availability of the affected system. The vulnerability is rated high severity with a CVSS score of 8.8.

A heap-based buffer overflow vulnerability exists in the Chromium-based Microsoft Edge browser. This flaw allows an unauthorized attacker to execute code remotely over a network, potentially leading to full compromise of the affected system. The vulnerability has a high severity rating with a CVSS score of 8.8.

A type confusion vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network. This flaw involves accessing a resource using an incompatible type, leading to potential information leakage.

A heap-based buffer overflow vulnerability exists in the Chromium-based Microsoft Edge browser. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network. The vulnerability has a high severity rating with a CVSS score of 8.8, indicating a critical impact on confidentiality, integrity, and availability. No specific affected versions or patch information are provided.

A type confusion vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network. The flaw involves accessing a resource using an incompatible type, potentially leading to privilege escalation. The vulnerability has a medium severity with a CVSS score of 5.4. No affected versions or patch information are currently provided.

A use-after-free vulnerability exists in the Chromium-based Microsoft Edge browser that allows an authorized attacker to elevate privileges over a network. The flaw involves improper handling of memory, which can lead to privilege escalation without user interaction.

A double free vulnerability in the Chromium-based Microsoft Edge browser allows an unauthorized attacker to execute code remotely over a network. This flaw can lead to complete compromise of confidentiality, integrity, and availability of the affected system. The vulnerability has a high severity score of 8.8 but no known exploits in the wild have been reported as of the publication date.

A heap-based buffer overflow vulnerability exists in Microsoft Edge (Chromium-based) that allows an unauthorized attacker to execute code remotely over a network. The flaw has a high severity rating with a CVSS score of 8.8, indicating critical impact on confidentiality, integrity, and availability. No affected versions or patch information are currently provided.

CVE-2026-20942 is a medium severity vulnerability in Microsoft Edge (Chromium-based) involving improper restriction of rendered UI layers or frames. This flaw allows an unauthorized attacker to perform spoofing attacks over a network by manipulating the user interface presentation. The vulnerability does not impact confidentiality, integrity, or availability beyond the potential for user interface spoofing.

Crawl4AI before 0.9.5 contains an improper certificate validation vulnerability that allows network attackers to intercept crawls because Chromium always launches with --ignore-certificate-errors. Man-in-the-middle or DNS-controlling attackers can serve forged content to the crawler and read cookies and headers sent, while hard-coded --no-sandbox also overrides CRAWL4AI_CHROMIUM_SANDBOX.

Improper verification of cryptographic signature in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.