CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Google Chrome Sandbox Escape Vulnerability via Insufficient Input Validation in ANGLE and GPU (CVE-2025-6558)
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 138.0.7204.157
[Impact] A remote attacker can bypass the browser sandbox boundaries and potentially execute arbitrary code on the host system via a crafted HTML page
[Mitigation] Immediately update Google Chrome to the latest stable channel version (138.0.7204.157 or higher)
Google Chrome GPU Heap Buffer Overflow Vulnerability (CVE-2022-4135) Analysis and Mitigation Guide
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 107.0.5304.121
[Impact] A remote attacker who has compromised the renderer process can bypass the browser sandbox and potentially execute arbitrary code via a crafted HTML page
[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (107.0.5304.121 or higher)
ARM Mali GPU Kernel Driver Memory Corruption Vulnerability (CVE-2022-22706) Technical Advisory
[Affected Scope] Devices equipped with ARM Mali GPU Kernel Driver Midgard (r26p0 to r31p0), Bifrost (r0p0 to r35p0), and Valhall (r19p0 to r35p0) architectures
[Impact] A local non-privileged user can gain write access to read-only memory pages, leading to local privilege escalation (LPE) and arbitrary code execution
[Mitigation] Apply the official security patches and upgrade to the latest driver versions (Bifrost/Valhall r36p0+, Midgard r32p0+) provided by ARM and device OEMs