PT-2026-88702

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An out of bounds read exists in ANGLE, a compatibility layer that allows OpenGL ES APIs to run on non-native platforms. This issue allows a remote attacker to potentially read memory...

PT-2026-88735

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description UI misrepresentation in Payments allows a remote attacker to spoof UI elements through the use of a crafted HTML page. Recommendations Update Google Chrome to version 153.0.8010.36 or...

PT-2026-88749

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A UI misrepresentation in the Downloads component allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering and a crafted HTML pag...

PT-2026-88616

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An observable discrepancy in Navigation allows a remote attacker to leak cross-origin data through the use of a crafted HTML page. Recommendations Update Google Chrome to version...

PT-2026-88656

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Missing authorization in the Browser component allows a remote attacker to bypass system access restrictions by using a crafted HTML page. Recommendations Update Google Chrome to versio...

PT-2026-88693

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An information leak exists in the Editing component that allows a remote attacker to obtain sensitive information by inducing a user to visit a crafted HTML page. Recommendations Update...

PT-2026-88704

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An out of bounds read occurs in ANGLE, a compatibility layer that allows OpenGL ES APIs to run on various graphics platforms. This issue allows a remote attacker who has already...

xmlrpc-c security update

1.51.0-11.1 - Fix HTML injection in Abyss HTTP server responses CVE-2026-15928...

PT-2026-88453

HTML::FormHandler versions before 0.410002 for Perl render field attributes into HTML without escaping using the process attrs method. Any application with fields or field labels where some attributes are built from data rather than literals allows attacker-influenced text in an attribute value...

PT-2026-88530

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A buffer overflow in WebRTC allows a remote attacker to potentially execute arbitrary code inside the sandbox by using a crafted HTML page. A buffer overflow occurs when a program write...

PT-2026-88537

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An information leak exists in Frames that allows a remote attacker to leak sensitive information by inducing a user to visit a crafted HTML page. Recommendations Update Google Chrome to...

PT-2026-88539

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An information leak exists in the ServiceWorker, which allows a remote attacker who has compromised the renderer process to obtain sensitive information through a crafted HTML page...

PT-2026-88542

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A confused deputy issue in the Prerender component allows a remote attacker who has compromised the renderer process to potentially bypass the web origin policy using a crafted HTML pag...

PT-2026-88640

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in the Isolated component allows a remote attacker to spoof UI elements by using a crafted HTML page. Recommendations Update Google Chrome to version 153.0.8010....

PT-2026-88642

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue in Input allows a remote attacker to execute arbitrary code inside the sandbox by using a crafted HTML page. Use after free is a memory corruption flaw that occur...

PT-2026-88644

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in Extensions allows a remote attacker to bypass system access restrictions to reach a privileged page by using a crafted HTML page. Recommendations Update Googl...

PT-2026-88659

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description UI misrepresentation in the user interface allows a remote attacker to spoof UI elements via a crafted HTML page by leveraging social engineering. Recommendations Update Google Chrome t...

PT-2026-88666

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An observable discrepancy in the Layout component allows a remote attacker to leak sensitive information by inducing a user to visit a crafted HTML page. Recommendations Update Google...

PT-2026-88669

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Missing authorization in Views allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering to entice a user to visit a crafted HTML...

PT-2026-88672

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An injection issue in DevTools allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox by using a crafted HTML page...