PT-2026-81753

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An information leak exists in the Canvas component that allows a remote attacker to leak cross-origin data by using a crafted HTML page. Cross-origin data leakage occurs when a website...

PT-2026-81722

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the FileSystem component allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering to entice a user to...

PT-2026-81762

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use after free issue in Chromecast allows a remote attacker to execute arbitrary code inside the sandbox by inducing the user to visit a crafted HTML page. Use after free is a memory...

PT-2026-81681

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A race condition in Workers allows a remote attacker to bypass system access restrictions by using a crafted HTML page. A race condition occurs when the timing or order of events affect...

PT-2026-81765

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the Network component allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded...

PT-2026-81636

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description Missing authorization in the Payments component allows a remote attacker to potentially bypass system access restrictions. This is achieved by leveraging social engineering a...

PT-2026-81773

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description Incorrect authorization in WebAppInstalls allows a remote attacker to bypass system access restrictions by using a crafted HTML page. Recommendations Update Google Chrome on...

PT-2026-81800

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An out-of-bounds write occurs in ANGLE, a compatibility layer that allows OpenGL ES APIs to run on various graphics platforms. This issue allows a remote attacker to potentially execute...

PT-2026-81832

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description An incorrect reference resolution in the WebView component allows a remote attacker to potentially bypass the web origin policy, which is a security mechanism that restricts...

PT-2026-81847

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An information leak exists in the Animation component that allows a remote attacker to obtain sensitive information by inducing a user to visit a crafted HTML page. Recommendations Upda...

PT-2026-81533

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incomplete cleanup in SiteIsolation allows a remote attacker who has compromised the renderer process to bypass site isolation by using a crafted HTML page. Site isolation is a security...

Astra Linux – Vulnerability in Chromium

The use of after-free in Aura in Google Chrome before version 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: Critical...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in CORS in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted input in SSL in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted input in Cast in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Animation in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Before version 148.0.7778.216, writing V8 code in Google Chrome allowed a remote attacker to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

In WebAudio, a vulnerability existed before version 95.0.4638.54 that allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. This vulnerability was addressed with the release of version 95.0.4638.54...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Permissions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...