PT-2026-107008

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An observable discrepancy in the Paint process allows a remote attacker to leak cross-origin data, which is information from a different origin than the one serving the page, by using a...

PT-2026-106890

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An uninitialized resource in ANGLE Almost Native Graphics Layer Engine, a compatibility layer that allows OpenGL ES APIs to run on Windows, enables a remote attacker to read memory...

PT-2026-106932

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incorrect authorization in the PermissionElement allows a remote attacker to bypass system access restrictions by using a crafted HTML page. Recommendations Update Google Chrome to...

PT-2026-107020

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An information leak exists in the Animation component that allows a remote attacker to leak sensitive information by inducing a user to visit a crafted HTML page. Recommendations Update...

PT-2026-107041

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Missing authorization in the Translate feature allows a remote attacker who has compromised the renderer process to bypass site isolation by using a crafted HTML page. Site isolation is...

PT-2026-107062

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An issue in the SanitizerAPI allows a remote attacker to leak sensitive information through the use of a crafted HTML page. The SanitizerAPI is a browser interface designed to clean and...

PT-2026-107069

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 155.0.8059.39 Description Incorrect authorization in the mobile version of the browser allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering to...

PT-2026-107047

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incomplete cleanup in Dawn allows a remote attacker to potentially execute arbitrary code outside the sandbox by using a crafted HTML page. Recommendations Update Google Chrome to versi...

PT-2026-106876

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A race condition exists in V8, the open-source high-performance JavaScript and WebAssembly engine. This flaw allows a remote attacker to execute arbitrary code within the sandbox by...

PT-2026-106948

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 155.0.8059.39 Description An uninitialized resource in the GPU allows a remote attacker to read memory outside the sandbox by using a crafted HTML page. Recommendations Update Google Chrome on Android...

PT-2026-106946

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An uninitialized resource in the Video component allows a remote attacker who has already compromised the renderer process to read memory outside the sandbox by using a specially crafte...

PT-2026-106980

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incorrect authorization in the Network component allows a remote attacker who has compromised the renderer process to bypass system access restrictions by using a crafted HTML page...

PT-2026-106961

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Missing authorization in the Browser component allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering to entice a user to visit...

PT-2026-107052

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An issue exists where a remote attacker can use social engineering and a specially crafted HTML page to spoof UI elements, leading to UI misrepresentation. Recommendations Update Google...

CVE-2026-103667: Improper Neutralization of Input During Web Page Generation

Gitea's container registry served blob downloads with a Content-Type taken from the media type declared in pushed image manifests, without a Content-Disposition or restrictive content security policy. A user who can push container images can publish a blob containing HTML and JavaScript with a...

CVE-2026-106404: Incorrect Authorization

Incorrect authorization in FontAccess in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106393: Use After Free

Use after free in Storage in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106368: User Interface (UI) Misrepresentation of Critical Information

UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106360: Exposure of Sensitive Information to an Unauthorized Actor

Information leak in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106337: User Interface (UI) Misrepresentation of Critical Information

UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...