CVE-2026-121177: Google Chrome: UI misrepresentation in PageInfo in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker to spoof…

UI misrepresentation in PageInfo in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121196: Google Chrome: Privilege elevation in Mobile in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker to bypass…

Privilege elevation in Mobile in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Medium...

PT-2026-136475

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description An information leak in the Core component allows a remote attacker to leak cross-origin data, which is data from a different origin than the one serving the page, by using a crafted HTM...

PT-2026-136562

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description An information leak exists in the Paint component, which allows a remote attacker to obtain sensitive information by inducing a user to visit a crafted HTML page. Recommendations Update...

PT-2026-136625

Observable discrepancy in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

PT-2026-136503

Improper input validation in Mobile in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: High...

PT-2026-136526

UI misrepresentation in Shopping in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

PT-2026-136591

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38 Description An observable discrepancy in Paint allows a remote attacker to obtain sensitive information by inducing a user to visit a crafted HTML page. Recommendations Update Google Chrome to...

PT-2026-136745

Name of the Vulnerable Software and Affected Versions CGI versions prior to 5.00 Description An open redirect issue exists where the redirect function decodes HTML entities in the URL after the application has already performed validation. This process allows a validated URL to change its meaning...

PT-2026-136755

Name of the Vulnerable Software and Affected Versions CGI versions prior to 5.00 Description Perl CGI allows HTML injection when processing text containing the sequence -- within a comment. This occurs because arguments are placed between without proper escaping, allowing the sequence to close th...

CVE-2026-121074: Google Chrome: Memory corruption in GPU in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially…

Memory corruption in GPU in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-121170: Google Chrome: Improper resource control in WebCodecs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web…

Improper resource control in WebCodecs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

TraPtitech traQ cross-site scripting vulnerability

TraPtitech TraQ versions prior to 3.28.3 contain a cross-site scripting vulnerability. This occurs because instances configured with local storage can retrieve user-uploaded SVG or HTML content via the /files/fileId endpoint and render it directly in the browser. As a result, attackers capable of...

Google Chrome information disclosure vulnerability

Google Chrome versions prior to 157.0.8103.38 contain an information disclosure vulnerability. This vulnerability stems from issues in the Paint component, which may allow remote attackers to obtain sensitive information by using specially crafted HTML pages...

CVE-2026-121132: Google Chrome: Information leak in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data…

Information leak in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121183: Google Chrome: Incorrect authorization in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had…

Incorrect authorization in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121135: Google Chrome: Security issue in Platform in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin…

Security issue in Platform in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121215: Google Chrome: UI misrepresentation in Bluetooth in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to spoof UI…

UI misrepresentation in Bluetooth in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121158: Google Chrome: Information leak in Paint in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive…

Information leak in Paint in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121230: Google Chrome: Race condition in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute…

Race condition in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...