exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 25 of 100

Files

Chrome AudioArray::Allocate Data Race / Out-Of-Bounds Access

Posted Apr 23, 2020

Authored by Google Security Research, Glazvunov

Chrome suffers from an issue where a data race in AudioArray::Allocate can lead to out-of-bounds access.

tags | exploit

advisories | CVE-2020-6388

SHA-256 | 40c89fb5d3f2f33337160274195305f3cd381ef1ff99e9b1b31576dd9241fd40

Download | Favorite | View

Related Files

Chrome Read-Only Property Overwrite

Posted Sep 15, 2023

Authored by Google Security Research, Glazvunov

Chrome suffers from a read-only property overwrite in TurboFan.

tags | exploit

advisories | CVE-2023-4352

SHA-256 | 339e46027cc8b8c66cb28ff3c463ad6c47cf6f8ffb6529887e6307d9537ad24c

Download | Favorite | View

Chrome device::OpenXrApiWrapper::InitSession Heap Use-After-Free

Posted Jul 17, 2023

Authored by Google Security Research, Glazvunov

Chrome suffers from a heap use-after-free vulnerability in device::OpenXrApiWrapper::InitSession. Versions affected include Google Chrome 114.0.5735.45 (Official Build) and Chromium 116.0.5806.0 (Developer Build).

tags | exploit

advisories | CVE-2023-3217

SHA-256 | 31d602a3d96e944d063ead1d9fbfca2a6e74125a6f3f1b9fd9de66da1262572c

Download | Favorite | View

Chrome Internal JavaScript Object Access Via Origin Trials

Posted Jun 27, 2023

Authored by Google Security Research, Glazvunov

Chrome suffers from an internal javascript object access vulnerability. suffers from a code execution vulnerability.

tags | exploit, javascript, code execution

advisories | CVE-2023-2724

SHA-256 | ffd1bc4c7c03a984e8cd76542fd8b6610321410abd4663e7c81762fe8f30c5ae

Download | Favorite | View

Chrome media::mojom::VideoFrame Missing Validation

Posted Apr 21, 2023

Authored by Google Security Research, Mark Brand

Chrome suffers from an issue where the traits for media::mojom::VideoFrame do not perform any validation on the stride and offset parameters when deserializing untrusted message data.

tags | exploit

advisories | CVE-2023-1532

SHA-256 | eef4ad83a3864cabde0b440774e63637f5458711c23fa69aeeee0b48adefd113

Download | Favorite | View

Chrome base::SampleVectorBase::MoveSingleSampleToCounts Heap Buffer Overflow

Posted Apr 10, 2023

Authored by Google Security Research, Glazvunov

Chrome suffers from a heap buffer overflow vulnerability in base::SampleVectorBase::MoveSingleSampleToCounts.

tags | exploit, overflow

advisories | CVE-2023-1220

SHA-256 | 56c179a58f11cc0f38bddec251f01ed9bc46c971de948deee99ccf3ae1bbc48f

Download | Favorite | View

Chrome base::debug::ActivityUserData::ActivityUserData Heap Buffer Overflow

Posted Apr 10, 2023

Authored by Google Security Research, Glazvunov

Chrome suffers from a heap buffer overflow vulnerability in base::debug::ActivityUserData::ActivityUserData.

tags | exploit, overflow

advisories | CVE-2023-1219

SHA-256 | bf0edebf8c86d69106bb2e6045c77ad82ba926fd2ae83f98fa7a0b19855f6185

Download | Favorite | View

Chrome JSNativeContextSpecialization::BuildElementAccess Bypass

Posted Jan 18, 2023

Authored by Google Security Research, Glazvunov

Chrome suffers from a copy-on-write check bypass in JSNativeContextSpecialization::BuildElementAccess.

tags | exploit

SHA-256 | e557b72be711db4993d6e8b8912d3a2b8d46fe92a763b730da3097b4ad6eb837

Download | Favorite | View

Chrome blink::LocalFrameView::PerformLayout Use-After-Free

Posted Nov 25, 2022

Authored by Google Security Research, Glazvunov

Chrome suffers from a heap use-after-free vulnerability in blink::LocalFrameView::PerformLayout due to an incomplete fix for CVE-2022-3199.

tags | exploit

advisories | CVE-2022-3199, CVE-2022-3654

SHA-256 | ede5dbd6ee9c5895a1b02c8bc6cefd5dfe9adef84fd2fceb45bd3140cd0fa16b

Download | Favorite | View

Chrome password_manager::WellKnownChangePasswordState::SetChangePasswordResponseCode Use-After-Free

Posted Nov 10, 2022

Authored by Google Security Research, Glazvunov

Chrome suffers from a password_manager::WellKnownChangePasswordState::SetChangePasswordResponseCode heap use-after-free vulnerability.

tags | exploit

advisories | CVE-2022-3842

SHA-256 | 95f6fb186156d8852bfb88cde51b59609bb9e1bb18fedd24876a32ee97f9a6fa

Download | Favorite | View

Chrome AccountSelectionBubbleView::OnAccountImageFetched Heap Use-After-Free

Posted Oct 20, 2022

Authored by Google Security Research, Glazvunov

Chrome suffers from a heap use-after-free vulnerability in AccountSelectionBubbleView::OnAccountImageFetched.

tags | exploit

advisories | CVE-2022-2852

SHA-256 | 58250b99dc0491f82cdc58424c569b8f9d2df212310a3407eb9441507e365641

Download | Favorite | View

Chrome offline_items_collection::OfflineContentAggregator::OnItemRemoved Heap Buffer Overflow

Posted Oct 20, 2022

Authored by Google Security Research, Glazvunov

Chrome suffers from a heap buffer overflow vulnerability in offline_items_collection::OfflineContentAggregator::OnItemRemoved.

tags | exploit, overflow

advisories | CVE-2022-2853

SHA-256 | a12649cc87b93dc4f1206b4520f0269c90067ff6042cf3fbf667a38af1956ab3

Download | Favorite | View

Chrome content::ServiceWorkerVersion::MaybeTimeoutRequest Heap Use-After-Free

Posted Aug 19, 2022

Authored by Google Security Research, Glazvunov

Chrome suffers from a heap use-after-free vulnerability in content::ServiceWorkerVersion::MaybeTimeoutRequest. Google Chrome version 103.0.5060.53 and Chromium version 105.0.5134.0 are affected.

tags | exploit

advisories | CVE-2022-2480

SHA-256 | a5cedab667714abf085c2a940066ea32b5ec7735eceff8cf7a6da8ce5a4eae7b

Download | Favorite | View

Chrome CVE-2022-1096 Incomplete Fix

Posted Jun 20, 2022

Authored by Google Security Research, Glazvunov

Chrome suffers from having an incomplete fix for CVE-2022-1096.

tags | exploit

advisories | CVE-2022-1096, CVE-2022-1232

SHA-256 | a034f87b7b68c9e71d23b3a96392d323625a4e9fd5c2246a143f439e0d73ddee

Download | Favorite | View

Chrome WebGPUDecoderImpl::DoRequestDevice Missing Bounds Check

Posted Jun 20, 2022

Authored by Google Security Research, Mark Brand

Chrome suffers from a missing bounds check in WebGPUDecoderImpl::DoRequestDevice.

tags | exploit

advisories | CVE-2022-1483

SHA-256 | ef3fbfbf0d934cc45efe08abfdf55bd55ba171f52a654e23e476c7b46f1b6cca

Download | Favorite | View

Chrome safe_browsing::ThreatDetails::OnReceivedThreatDOMDetails Use-After-Free

Posted Mar 30, 2022

Authored by Google Security Research, Glazvunov

Chrome suffers from a heap use-after-free vulnerability in safe_browsing::ThreatDetails::OnReceivedThreatDOMDetails. Versions affected include Google Chrome 96.0.4664.110 (Official Build) (64-bit) and Chromium 99.0.4807.0 (Developer Build) (64-bit).

tags | exploit

advisories | CVE-2022-0289

SHA-256 | abc96b3ccb6e22768b4210d82c4a8f2e4acb93ed93b406ea11be905b7b11fd03

Download | Favorite | View

Chrome chrome_pdf::PDFiumEngine::RequestThumbnail Heap Buffer Overflow

Posted Mar 18, 2022

Authored by Google Security Research, Glazvunov

Chrome suffers from a heap buffer overflow vulnerability in chrome_pdf::PDFiumEngine::RequestThumbnail.

tags | exploit, overflow

advisories | CVE-2022-0306

SHA-256 | bd3fa3d2b549b50b402df051a6cd94824b4d90a629f0814051f738170796b1e5

Download | Favorite | View

Chrome HandleTable::AddDispatchersFromTransit Integer Overflow

Posted Mar 16, 2022

Authored by Google Security Research, Glazvunov

Chrome suffers from an integer overflow vulnerability in HandleTable::AddDispatchersFromTransit that can lead to memory corruption.

tags | exploit, overflow

advisories | CVE-2022-0608

SHA-256 | 0ef0d4da3c4dc9fb06483f95973add0c92d39c6c630ce2e22e5798641135e44a

Download | Favorite | View

Chrome RenderFrameHostImpl Use-After-Free

Posted Feb 21, 2022

Authored by Google Security Research, Glazvunov

Chrome suffers from a state tracking issue in RenderFrameHostImpl that leads to a use-after-free vulnerability.

tags | exploit

advisories | CVE-2022-0290

SHA-256 | d581673d0c71222578b61244ffc597f2d89dd9ee51ee889782cd5588f7d54bf9

Download | Favorite | View

Chrome storage::BlobBuilderFromStream Uninitializaed On-Stack Pointer

Posted Feb 7, 2022

Authored by Google Security Research, Mark Brand

Chrome suffers from making use of an uninitialized on-stack pointer in storage::BlobBuilderFromStream.

tags | exploit

advisories | CVE-2022-0115

SHA-256 | 7508021fc3ad459f9d4a21d3d34a8201df4467cbbf9015fe49fb42a0ad822203

Download | Favorite | View

Chrome IPC::ChannelAssociatedGroupController Memory Corruption

Posted Jan 13, 2022

Authored by Google Security Research, Glazvunov

Chrome suffers from a memory corruption vulnerability in IPC::ChannelAssociatedGroupController due to interface ID reuse.

tags | exploit

advisories | CVE-2021-4098

SHA-256 | 23b2104d82495d408d6c49e60967e71884e4e77854a1cebb576ccad92a937b92

Download | Favorite | View

Chrome storage::BlobURLStoreImpl::Revoke Heap Use-After-Free

Posted Jan 7, 2022

Authored by Google Security Research, Glazvunov

Chrome suffers from a heap use-after-free vulnerability in storage::BlobURLStoreImpl::Revoke.

tags | exploit

advisories | CVE-2021-4057

SHA-256 | 08933f6422b86ae33f009b22a331db75fb1ea7da60743243cb0e1fc0c82a0af2

Download | Favorite | View

Chrome NavigationPreloadRequest Site Isolation Bypass

Posted Dec 16, 2021

Authored by Google Security Research, Glazvunov

Chrome suffers from a site isolation bypass vulnerability in NavigationPreloadRequest.

tags | exploit, bypass

advisories | CVE-2021-38010

SHA-256 | c9ae23bee94814ab6b61e9a833062d8e293e2578a25f1bb12700b1b43ab9d235

Download | Favorite | View

Chrome ThreadedIconLoader::DecodeAndResizeImageOnBackgroundThread Heap Use-After-Free

Posted Dec 16, 2021

Authored by Google Security Research, Glazvunov

Chrome suffers from a heap use-after-free vulnerability in ThreadedIconLoader::DecodeAndResizeImageOnBackgroundThread.

tags | exploit

advisories | CVE-2021-38005

SHA-256 | 71808e6bb0dde08cb3a27713b43d7dc091dfb113ccf137e1c64ebecc641c8d58

Download | Favorite | View

Chrome blink::NativeIOFile::DoRead Heap Use-After-Free

Posted Dec 16, 2021

Authored by Google Security Research, Glazvunov

Chrome suffers from a heap use-after-free vulnerability in blink::NativeIOFile::DoRead.

tags | exploit

advisories | CVE-2021-38006

SHA-256 | c59d2ce9fc476860bcf31c9b55f9ea51508a55eab0465bddfe51b527a15f6556

Download | Favorite | View

Chrome HRTFDatabaseLoader::WaitForLoaderThreadCompletion Data Race

Posted Sep 22, 2021

Authored by Google Security Research, Glazvunov

Chrome suffers from a HRTFDatabaseLoader::WaitForLoaderThreadCompletion data race condition.

tags | exploit

advisories | CVE-2021-30603

SHA-256 | cbbb7af067da8a18782b6edada6db9b1b563f5bccf566cd7d4b1fd025dae8f61

Download | Favorite | View