PT-2026-88554

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An information leak in the Enterprise component on Windows allows a remote attacker to obtain sensitive information by inducing a user to visit a crafted HTML page. Recommendations Upda...

PT-2026-88565

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in the Downloads component allows a remote attacker who has compromised the renderer process to spoof UI elements by using a crafted HTML page. Recommendations...

PT-2026-88566

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in Workers allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded from one origin...

PT-2026-88578

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An observable discrepancy in the Autofill feature allows a remote attacker to obtain sensitive information by using a crafted HTML page. Recommendations Update Google Chrome to version...

PT-2026-88596

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A UI misrepresentation issue in the browser allows a remote attacker to spoof UI elements using a crafted HTML page through social engineering. Recommendations Update Google Chrome to...

PT-2026-88599

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in the Network component allows a remote attacker who has compromised the renderer process to bypass site isolation by using a crafted HTML page. Site isolation ...

PT-2026-88602

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A confused deputy issue in the Fullscreen feature allows a remote attacker to spoof UI elements using a crafted HTML page. This requires the attacker to have already compromised the...

PT-2026-88619

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in Safebrowsing allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering to entice a user to visit a...

PT-2026-88731

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Missing authorization in the Document Object Model DOM, which is the programming interface for HTML and XML documents, allows a remote attacker to potentially leak sensitive information...

PT-2026-88736

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A type confusion issue exists in the XML processing of the browser. This allows a remote attacker to potentially execute arbitrary code within the sandbox by inducing the user to visit ...

PT-2026-88751

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in the Paint component allows a remote attacker to obtain cross-origin data by using a crafted HTML page. Cross-origin data refers to information belonging to a...

PT-2026-88639

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An observable discrepancy in the Network component allows a remote attacker to obtain cross-origin data by using a crafted HTML page. Cross-origin data refers to information from a...

PT-2026-88594

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue in the Browser component allows a remote attacker to execute arbitrary code outside the sandbox. This is achieved by leveraging social engineering to entice a use...

ROS-20260908-73-0098

The vulnerability of the Skia component in Google Chrome and Microsoft Edge relates to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...

ROS-20260908-73-0099

The vulnerability of the Skia component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

ROS-20260908-73-0085

The vulnerability of the Skia component in Google Chrome and Microsoft Edge is related to errors in HTTP request processing. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

PT-2026-88613

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Missing authorization in the ControlledFrame component allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering to entice a user ...

PT-2026-88672

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An injection issue in DevTools allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox by using a crafted HTML page...

PT-2026-88684

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in the WebUI allows a remote attacker to bypass system access restrictions to reach a privileged page by using a crafted HTML page. Recommendations Update Google...

ROS-20260907-73-0064

The vulnerability of the Skia component in Google Chrome and Microsoft Edge is related to errors in HTTP request processing. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...