PT-2026-81739

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the Document Object Model DOM, which is the programming interface for HTML and XML documents, allows a remote attacker to potentially leak sensitive informati...

PT-2026-81802

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An observable discrepancy in HTML allows a remote attacker to obtain sensitive information by inducing a user to visit a crafted HTML page. Recommendations Update Google Chrome to versi...

PT-2026-81830

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An information leak in the Document Object Model DOM allows a remote attacker to obtain sensitive information. This is achieved by leveraging social engineering to entice a user to visi...

PT-2026-81676

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the FileSystem component allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering to entice a user to...

PT-2026-81681

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A race condition in Workers allows a remote attacker to bypass system access restrictions by using a crafted HTML page. A race condition occurs when the timing or order of events affect...

PT-2026-81733

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description UI misrepresentation in WebAppInstalls allows a remote attacker to spoof UI elements through the use of a crafted HTML page. Recommendations Update Google Chrome to version 152.0.7977.6...

PT-2026-81777

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 152.0.7977.65 Description Incorrect authorization in the mobile version of the browser allows a remote attacker to bypass system access restrictions by using a crafted HTML page. Recommendations Update to...

PT-2026-81804

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use after free issue exists in the Animation component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote...

PT-2026-81837

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A UI misrepresentation in Geometry allows a remote attacker to spoof UI elements by using a crafted HTML page. Recommendations Update to version 152.0.7977.65 or later...

RHEL 9 : osbuild-composer (RHSA-2026:59560)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:59560 advisory. A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building...

CVE-2026-79023: Incorrect Authorization

Incorrect authorization in Editing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79040: Use of Uninitialized Resource

Uninitialized resource in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79202: Use After Free

Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79074: Exposure of Sensitive Information to an Unauthorized Actor

Information leak in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

PT-2026-81474

Name of the Vulnerable Software and Affected Versions eml parser versions prior to 3.0.2 Description The clean found uri function in eml parser/parser.py validates potential URL strings before unescaping HTML entities used for colon, slash, or period characters. This causes valid encoded URLs and...

PT-2026-82022

Coder: Stored HTML injection via unescaped ApplicationName and LogoURL appearance settings in github.com/coder/coder...

CVE-2026-79293: Exposure of Sensitive Information to an Unauthorized Actor

Information leak in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79244: Use After Free

Use after free in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79180: User Interface (UI) Misrepresentation of Critical Information

UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

PT-2026-81705

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An information leak exists in the XR Extended Reality component, which allows a remote attacker to obtain sensitive information by inducing a user to visit a crafted HTML page...