PT-2026-106965

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A buffer overflow exists in the Fonts component. A remote attacker who has already compromised the renderer process can potentially execute arbitrary code outside the sandbox by using a...

PT-2026-107097

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Missing authorization in the BrowserTag component allows a remote attacker to bypass site isolation. This occurs when an attacker has already compromised the renderer process and uses...

PT-2026-106856

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incorrect reference resolution in DevTools allows a remote attacker who has compromised the renderer process to obtain sensitive information through a crafted HTML page. Recommendations...

PT-2026-106983

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A use of released resource in FontAccess allows a remote attacker who has compromised the renderer process to bypass the web origin policy through a crafted HTML page. The web origin...

PT-2026-106974

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A confused deputy issue in Contextual Tasks allows a remote attacker who has compromised the renderer process to bypass system access restrictions to reach a privileged page by using a...

PT-2026-106973

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A race condition exists in CacheStorage. This issue allows a remote attacker who has already compromised the renderer process to read memory outside the sandbox by using a specially...

PT-2026-106972

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Improper input validation in WebAudio allows a remote attacker who has compromised the renderer process to bypass system access restrictions through a crafted HTML page. Recommendations...

PT-2026-106976

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An observable discrepancy in the Autofill AI allows a remote attacker to obtain sensitive information. This occurs when an attacker has compromised the renderer process and uses social...

PT-2026-106992

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A use of released resource in the UI allows a remote attacker who has compromised the renderer process to spoof UI elements by using a crafted HTML page. Recommendations Update Google...

PT-2026-107049

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A race condition in Fonts allows a remote attacker who has compromised the renderer process to execute arbitrary code outside the sandbox by using a crafted HTML page. A race condition...

PT-2026-107017

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A use of released resource in Session allows a remote attacker who has compromised the renderer process to spoof UI elements by using a crafted HTML page. Recommendations Update Google...

CVE-2026-106284: Out-of-bounds Read

Out of bounds read in Printing in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

PT-2026-106963

Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

PT-2026-107096

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An information leak exists in the Audio component. A remote attacker who has already compromised the renderer process can read memory outside the sandbox by using a specially crafted...

PT-2026-107036

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incorrect authorization in the Omnibox allows a remote attacker who has compromised the renderer process to obtain sensitive information by using a crafted HTML page. Recommendations...

PT-2026-107042

Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

PT-2026-107079

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incorrect authorization in the GetUserMedia function allows a remote attacker who has compromised the renderer process to bypass system access restrictions by using a crafted HTML page...

PT-2026-106873

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Missing authorization in the FileSystem component allows a remote attacker who has compromised the renderer process to bypass the web origin policy, which is a security mechanism that...

PT-2026-107011

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A use of released resource in Core allows a remote attacker who has compromised the renderer process to potentially obtain cross-origin data through a crafted HTML page. A use of releas...

PT-2026-106935

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incomplete cleanup in the GetUserMedia function allows a remote attacker to spoof UI elements. This occurs when an attacker has already compromised the renderer process and uses social...