Google Chrome resource management error vulnerability

Google Chrome for Mac versions prior to 156.0.8078.47 contain a resource management error vulnerability. This vulnerability stems from use-after-free issues within Internals, potentially allowing remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

PT-2026-118499

Name of the Vulnerable Software and Affected Versions sanitize-html versions prior to 2.18.0 Description A flaw exists when a non-default nonTextTags configuration includes noscript. The sanitizer fails to correctly handle implied ancestor close events emitted by htmlparser2 inside a noscript...

PT-2026-120328

Summary A stored Cross-Site Scripting XSS vulnerability exists in the incident creation form, allowing an authenticated attacker to inject malicious HTML/JavaScript that executes in the browser of any user who views the status page, potentially leading to session token theft and account takeover...

PT-2026-120323

Summary With html: true, markdown-it takes quadratic time to parse repeated unterminated HTML constructs inside a paragraph. This affects HTML comments , ?, , and . When the terminator is absent, matching fails. Parsing eventually reaches the next opener and scans an overlapping suffix again...

Google Chrome buffer error vulnerability

Google Chrome versions prior to 156.0.8078.47 contain a buffer error vulnerability. This vulnerability stems from an out-of-bounds read in the Payments component, potentially allowing remote attackers to read memory within the sandbox via specially crafted HTML pages...

PT-2026-118726

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Improper access control in ANGLE allows a remote attacker to potentially execute arbitrary code inside the sandbox by using a crafted HTML page. Recommendations Update Google Chrome to...

PT-2026-118922

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 156.0.8078.47 Description Memory corruption in the browser allows a remote attacker to potentially read memory inside the sandbox by using a crafted HTML page. The sandbox is a security mechanism used...

PT-2026-118848

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description An out of bounds read exists in the Actor component, which allows a remote attacker to read memory within the sandbox by using a specially crafted HTML page. An out of bounds read occur...

PT-2026-118989

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 156.0.8078.47 Description Improper input validation in the Omnibox allows a remote attacker to potentially execute arbitrary code inside the sandbox by using a crafted HTML page. Recommendations Updat...

PT-2026-118817

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Improper input validation in the Media component allows a remote attacker to potentially execute arbitrary code inside the sandbox by inducing the user to visit a crafted HTML page...

PT-2026-118844

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Improper input validation in WebShare allows a remote attacker to potentially execute arbitrary code inside the sandbox by using a crafted HTML page. Recommendations Update Google Chrom...

PT-2026-118727

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Improper access control in the V8 engine allows a remote attacker to potentially bypass the web origin policy, which is a security mechanism that restricts how a document or script load...

PT-2026-118709

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Improper input validation in the GPU component allows a remote attacker to potentially execute arbitrary code inside the sandbox by inducing the user to visit a crafted HTML page...

PT-2026-118859

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Improper input validation in Actor allows a remote attacker to potentially execute arbitrary code inside the sandbox by using a crafted HTML page. Recommendations Update Google Chrome t...

PT-2026-118986

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Improper input validation in PerformanceAPIs allows a remote attacker to potentially execute arbitrary code inside the sandbox by using a crafted HTML page. Recommendations Update Googl...

PT-2026-118946

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 156.0.8078.47 Description Improper input validation in the mobile version of the browser allows a remote attacker to potentially execute arbitrary code inside the sandbox by using a crafted HTML page...

PT-2026-119040

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Memory corruption in the Sandbox allows a remote attacker to execute arbitrary code inside the sandbox by inducing the user to open a crafted HTML page. Recommendations Update Google...

Google Chrome Vulnerability: CVE-2026-113094

Memory corruption in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

Google Chrome Vulnerability: CVE-2026-113117

Improper input validation in ANGLE in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

Google Chrome Vulnerability: CVE-2026-113343

Memory corruption in Sandbox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...