CVE-2026-87597

UI misrepresentation in CustomTabs in Google Chrome on on Android prio...

CVE-2026-87555

Uninitialized resource in GPU in Google Chrome on on Android prior to...

CVE-2026-87534

Missing authorization in WebView in Google Chrome on on Android prior...

CVE-2026-87565

Information leak in Passwords in Google Chrome on on Android prior to...

CVE-2026-87520

Use after free in Dawn in Google Chrome on on Android prior to 153.0.8...

CVE-2026-87576

Uninitialized resource in GPU in Google Chrome on on Android prior to...

CVE-2026-87640

Out of bounds read in WebView in Google Chrome on on Android prior to...

PT-2026-89281

An information disclosure vulnerability in the Palo Alto Networks Prisma® Access Agent on Linux enables a local user to access sensitive configuration data and credentials. The Prisma Access Agent on macOS, Windows, iOS, Android and Chrome OS is not affected...

CVE-2026-87522

Missing authorization in WebView in Google Chrome on on Android prior...

CVE-2026-87486

Clickjacking in TrustedWebActivities in Google Chrome on on Android pr...

CVE-2026-87483

Incorrect authorization in Browser in Google Chrome on on Android prio...

CVE-2026-87583

UI misrepresentation in Passwords in Google Chrome on on Android prior...

CVE-2026-87624

UI misrepresentation in Passwords in Google Chrome on on Android prior...

CVE-2026-87463

Incorrect authorization in Certificate in Google Chrome on on Android...

PT-2026-89285

Today is Patch Tuesday and it's a significant one. 966 vulnerabilities patched in the official count, with another 204 fixed separately earlier in September across Azure, Entra ID, Edge, and Copilot Studio. By any count this is the biggest single security release Microsoft has ever shipped. Two o...

PT-2026-89594

A potential improper authorization vulnerability was reported in the Lenovo File Manager Android Application, distributed exclusively in the Chinese market, that could allow a local authenticated user to read or modify protected files within the application...

PT-2026-89283

Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allows a local user to escalate their privileges to NT AUTHORITYSYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative...

PT-2026-89282

A vulnerability in the EndPoint Data Loss Prevention DLP enforcement of Palo Alto Networks Prisma® Access Agent enables a local user to bypass configured DLP policy enforcement controls and exfiltrate sensitive data. This Prisma Access Agent on macOS, Linux, iOS, Android and Chrome OS is not...

CVE-2026-87643

Integer overflow in GPU in Google Chrome on on Android prior to 153.0...

PT-2026-89597

A vulnerability was reported in Lenovo Health Android Application, distributed exclusively in the Chinese market, that could allow an attacker to access sensitive health-related information...