[local] MEmu Android Emulator 9.2.7.0 - Local Privilege Escalation

MEmu Android Emulator 9.2.7.0 - Local Privilege Escalation

[local] Google Chrome 145.0.7632.75 - CSSFontFeatureValuesMap

Google Chrome 145.0.7632.75 - CSSFontFeatureValuesMap

Google Chrome < 145.0.7632.75 - CSSFontFeatureValuesMap Use-After-Free

Topic: Google Chrome < 145.0.7632.75 - CSSFontFeatureValuesMap Use-After-Free Risk: High Text:# Exploit Title: Google Chrome <

#0daytoday #Selenium Chrome Remote Code Execution Exploit CVE-2022-28108 [remote #exploits #0day #Exploit]

Android Browser Open in New Tab Cookie Theft

In Androids stock AOSP Browser application and WebView component, the "open in new tab" functionality allows a file URL to be opened. On

Android Open Source Platform (AOSP) Browser UXSS

This Metasploit module exploits a Universal Cross-Site Scripting (UXSS) vulnerability present in all versions of Androids open source stock

Google Pixel MFC H264 Processing Memory Corruption

There is a memory corruption issue in the MFC media processing core on the Pixel 7. It occurs when decoding a malformed H264 stream in

Google Links Over 60 Zero Days To Spyware Vendors

Chrome 121 Javascript Fork Malloc Bomb

Chrome version 121 suffers from a javascript fork malloc vulnerability that indicates memory corruption upon crash.

Chrome content::NavigationURLLoaderImpl::FallbackToNonInterceptedRequest Heap Use-After-Free

Chrome suffers from a heap use-after-free vulnerability in content::NavigationURLLoaderImpl::FallbackToNonInterceptedRequest.

Firefox 121 / Chrome 120 Denial Of Service

Firefox version 121 and Chrome version 120 may both suffer from a minor denial of service issue with file downloads.

Android DeviceVersionFragment.java Privilege Escalation

Topic: Android DeviceVersionFragment.java Privilege Escalation Risk: Medium Text:#!/usr/bin/env python import subprocess # Connect to

Chrome V8 Sandbox Escape

Proof of concept exploit for a new technique to escape from the Chrome V8 sandbox.

Chrome V8 Type Confusion / New Sandbox Escape

Proof of concept exploit for CVE-2023-3079 that leverages a type confusion in V8 in Google Chrome versions prior to 114.0.5735.110. This

Chrome V8 JIT XOR Arbitrary Code Execution

Chrome V8 proof of concept exploit for CVE-2021-21220. The specific flaw exists within the implementation of XOR operation when executed

Chrome V8 Type Confusion

Proof of concept exploit for CVE-2023-3079 that leverages a type confusion in V8 in Google Chrome versions prior to 114.0.5735.110. This

Google 0-Day Browser Bug Under Attack, Patch Available

Google Patches Seventh Chrome Zero-Day Of 2023

Android mtk_jpeg Driver Race Condition / Privilege Escalation

A race condition in the Android mtk_jpeg driver can lead to memory corruption and potential local privilege escalation.

Qualcomm Patches 3 Zero Days Reported By Google

A New Chrome 0-Day Is Sending The Internet Into A New Chapter Of Groundhog Day

Google Rushes To Patch New Zero-Day Exploited By Spyware Vendor

Incomplete Disclosures By Apple And Google Create Huge Blindspot For 0-Day Hunters

#0daytoday #Chrome Read-Only Property Overwrite Exploit CVE-2023-4352 [dos #exploits #0day #Exploit]

Google Patches Chrome 0-Day Reported By Apple, Spyware Hunters

Android Zero Day Patched With September 2023 Security Updates

It's A Hot 0-Day Summer For Apple, Google, And Microsoft Security Fixes

Google Researchers Discover In-The-Wild Exploitation Of Zimbra Zero Day

Kiddoware Kids Place Parental Control Android App 3.8.49 XSS / CSRF / File Upload

Kiddoware Kids Place Parental Control Android App versions 3.8.49 and below suffer from weak hashing, cross site request forgery, cross

Chrome SpvGetMappedSamplerName Out-Of-Bounds String Copy

Chrome has an issue where there is an out-of-bounds string copy that can occur when parsing a uniform sampler name in

Chrome GL_ShaderBinary Untrusted Process Exposure

Chrome has an issue where the GL_ShaderBinary is exposed to untrusted processes.

Chrome media::mojom::VideoFrame Missing Validation

Chrome suffers from an issue where the traits for media::mojom::VideoFrame do not perform any validation on the stride and offset

Zero Day In Google Chrome Patched: Bug Exploited In The Wild

[local] Google Chrome Browser 111.0.5563.64 - AXPlatformNodeCocoa Fatal OOM/Crash (macOS)

Google Chrome Browser 111.0.5563.64 - AXPlatformNodeCocoa Fatal OOM/Crash (macOS)

#0daytoday #Google Chrome Browser 111.0.5563.64 AXPlatformNodeCocoa Denial Of Service Exploit [#0day #Exploit]

#0daytoday #Google Chrome 109.0.5414.74 - Code Execution via missing lib file Vulnerability [#0day #Exploit]