Google Chrome Vulnerability: CVE-2026-113226

Memory corruption in Model in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

PT-2026-132986

Security vulnerability affects the keycloak package. OWASP Java HTML Sanitizer is a configureable HTML Sanitizer written in Java, allowing inclusion of HTML authored by third-parties in web applications while protecting against XSS...

PT-2026-133020

Security vulnerability affects the gatekeeper-fips package. Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree...

PT-2026-132924

Security vulnerability affects the gatekeeper-fips package. Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

PT-2026-118252

The DiviGear Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via update license AJAX Action in all versions up to, and including, 5.2.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level...

PT-2026-119440

Name of the Vulnerable Software and Affected Versions Oracle Application Object Library versions 12.2.3 through 12.2.15 Description An unauthenticated SQL injection exists in the Thin Client Framework TCF servlet of the Oracle Application Object Library. An attacker with network access via HTTP c...

PT-2026-133233

TuxCare rebuilt @storybook/preset-html-webpack to address 1 CVE. Fixed in 7.0.7-tuxcare.1...

PT-2026-119518

Vulnerability in the Installed Base product of Oracle E-Business Suite component: HTML UI. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Installed Base. Successful attacks requir...

PT-2026-132981

Security vulnerability affects the gatekeeper-fips package. Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree...

PT-2026-118799

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description An out of bounds read exists in the FileSystem component. This allows a remote attacker to read memory inside the sandbox by using a specially crafted HTML page. An out of bounds read...

PT-2026-118713

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Improper input validation in Extensions allows a remote attacker to potentially execute arbitrary code inside the sandbox by using a crafted HTML page. Recommendations Update Google...

PT-2026-119023

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Memory corruption in the Core component on Windows allows a remote attacker to potentially read memory inside the sandbox by using a crafted HTML page. Recommendations Update Google...

PT-2026-118495

Name of the Vulnerable Software and Affected Versions sanitize-html version 2.18.0 Description In the sanitize-html library, a recursive call to the sanitizeHtmltext, options function occurs when an tag is not permitted and the disallowedTagsMode is set to 'discard'. Because this recursion lacks ...

Google Chrome Resource Management Error Vulnerability

Versions of Google Chrome prior to 156.0.8078.47 have a security vulnerability that stems from the reuse of freed resources in the GPU. This vulnerability could allow remote attackers to execute arbitrary code within a sandbox through a specially crafted HTML page...

Google Chrome Resource Management Error Vulnerability

Versions of Google Chrome prior to 156.0.8078.47 have a resource management vulnerability. This vulnerability stems from the Actor’s ability to re-use resources after they have been released, potentially allowing remote attackers to execute arbitrary code within the sandbox through a specially...

Google Chrome input validation error vulnerability

Google Chrome versions prior to 156.0.8078.47 contain an input validation error vulnerability. This vulnerability stems from improper FullScreen input validation; remote attackers can exploit it by sending specially crafted HTML pages to execute arbitrary code within a sandbox...

Google Chrome Vulnerability: CVE-2026-113329

Out of bounds read in Installer in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

PT-2026-118315

Values entered by visitors were placed into the HTML summary email without being escaped. An unauthenticated attacker could use this to inject HTML into an email that is shown to the recipient...

Google Chrome resource management error vulnerability

Google Chrome versions prior to 156.0.8078.47 contain a resource management error vulnerability. This vulnerability stems from use-after-free issues in APIs and may allow remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

PT-2026-118854

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description An information leak exists in ANGLE Almost Native Graphics Layer Engine, a compatibility layer that allows OpenGL ES APIs to run on Windows. A remote attacker can leak sensitive...