PT-2026-136477

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A use after free issue exists in the Modularization component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remo...

PT-2026-136484

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A type confusion issue exists in the V8 engine, which is the open-source JavaScript and WebAssembly engine used by the browser. This flaw allows a remote attacker to execute arbitrary...

PT-2026-136486

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A use after free issue exists in WTF, which can allow a remote attacker to execute arbitrary code within the sandbox by inducing the user to open a specially crafted HTML page. Use afte...

PT-2026-136480

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description Improper input validation in the Performance component allows a local attacker to potentially execute arbitrary code inside the sandbox via a local program. Recommendations Update Googl...

PT-2026-136470

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A use after free issue in the GPU component allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to visit a specially crafted HTML page. Use after...

PT-2026-136487

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description Incorrect authorization in the FileSystem API allows a remote attacker to potentially execute arbitrary code outside the sandbox. This is achieved by leveraging social engineering to...

PT-2026-136377

A missing integrity verification vulnerability has been discovered in the Virtual Intranet Access VIA client. Successful exploitation of this vulnerability could allow a low-privileged local attacker to execute arbitrary code with elevated privileges on the underlying operating system...

CVE-2026-65139: NVIDIA Slurm: NVIDIA Slurm contains an attacker-controlled SQL injection attack in certain SlurmDBD RPCs that can lead to arbitrary…

NVIDIA Slurm contains an attacker-controlled SQL injection attack in certain SlurmDBD RPCs that can lead to arbitrary code execution...

CVE-2026-121451: amir1376 ab-download-manager: AB Download Manager before 1.11.2 contains a cross-site request forgery vulnerability in its unauthenticated…

AB Download Manager before 1.11.2 contains a cross-site request forgery vulnerability in its unauthenticated browser-integration API that allows remote attackers to write attacker-chosen files to arbitrary paths. A malicious web page can send a text/plain request to /start-headless-download with...

PT-2026-136516

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A use after free issue in the DOM allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to open a specially crafted HTML page. Use after free is a...

PT-2026-136495

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A race condition in the V8 engine allows a remote attacker to execute arbitrary code within the sandbox by using a specially crafted HTML page. A race condition occurs when the timing o...

CVE-2026-121112: Google Chrome: Out of bounds read in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised…

Out of bounds read in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-121073: Google Chrome: Use after free in Network in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute…

Use after free in Network in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Low...

PT-2026-136570

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A type confusion issue exists in PDFium, a PDF rendering engine. This flaw allows a remote attacker to execute arbitrary code within the sandbox by inducing the application to process a...

PT-2026-136559

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A use after free issue exists in ANGLE, which is a compatibility layer that allows OpenGL ES APIs to run on non-native platforms. This flaw allows a remote attacker to execute arbitrary...

PT-2026-136560

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A buffer overflow exists in Dawn, a WebGPU implementation, which allows a remote attacker to potentially execute arbitrary code outside the sandbox by inducing the user to visit a craft...

PT-2026-136630

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A type confusion issue exists in the V8 engine, which is the open-source JavaScript and WebAssembly engine used by the browser. This flaw allows a remote attacker to execute arbitrary...

PT-2026-136587

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description Incorrect authorization in Extensions allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox by using a crafted HTML...

PT-2026-136585

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A use after free issue in the Editing component allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to open a specially crafted HTML page. Use aft...

PT-2026-136589

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description A use after free issue exists in the PictureInPicture component. A remote attacker can leverage social engineering to execute arbitrary code outside the sandbox by inducing a user to...