<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent vulnerabilities from the Google CNA root</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Latest vulnerabilities published by the CNAs operating under the Google root of the CVE Program.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 19 Aug 2026 13:30:55 +0000</lastBuildDate>
    <item>
      <title>CVE-2026-76045 (Chrome)</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-76045</link>
      <description>Use after free in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)</description>
      <content:encoded>Use after free in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-76045</guid>
      <pubDate>Tue, 18 Aug 2026 20:31:28 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-76038 (Chrome)</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-76038</link>
      <description>Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)</description>
      <content:encoded>Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-76038</guid>
      <pubDate>Tue, 18 Aug 2026 20:31:28 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-76047 (Chrome)</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-76047</link>
      <description>Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)</description>
      <content:encoded>Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-76047</guid>
      <pubDate>Tue, 18 Aug 2026 20:31:28 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-76041 (Chrome)</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-76041</link>
      <description>Information leak in Skia in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: High)</description>
      <content:encoded>Information leak in Skia in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: High)</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-76041</guid>
      <pubDate>Tue, 18 Aug 2026 20:31:28 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-76043 (Chrome)</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-76043</link>
      <description>Incorrect calculation in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)</description>
      <content:encoded>Incorrect calculation in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-76043</guid>
      <pubDate>Tue, 18 Aug 2026 20:31:27 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-76046 (Chrome)</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-76046</link>
      <description>Buffer overflow in ANGLE in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)</description>
      <content:encoded>Buffer overflow in ANGLE in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-76046</guid>
      <pubDate>Tue, 18 Aug 2026 20:31:27 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-76042 (Chrome)</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-76042</link>
      <description>Use of uninitialized resource in GPU in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)</description>
      <content:encoded>Use of uninitialized resource in GPU in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-76042</guid>
      <pubDate>Tue, 18 Aug 2026 20:31:27 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-76035 (Chrome)</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-76035</link>
      <description>Inappropriate implementation in Media in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)</description>
      <content:encoded>Inappropriate implementation in Media in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-76035</guid>
      <pubDate>Tue, 18 Aug 2026 20:31:26 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-76040 (Chrome)</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-76040</link>
      <description>Use after free in Browser in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)</description>
      <content:encoded>Use after free in Browser in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-76040</guid>
      <pubDate>Tue, 18 Aug 2026 20:31:26 +0000</pubDate>
    </item>
    <item>
      <title>CVE-2026-76039 (Chrome)</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-76039</link>
      <description>Incorrect reference resolution in Core in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: High)</description>
      <content:encoded>Incorrect reference resolution in Core in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: High)</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-76039</guid>
      <pubDate>Tue, 18 Aug 2026 20:31:26 +0000</pubDate>
    </item>
  </channel>
</rss>
