PT-2026-88657

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Missing authorization in the LocalNetworkAccess component allows a remote attacker who has compromised the renderer process to bypass system access restrictions by using a crafted HTML...

PT-2026-88668

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Improper input validation in Chromium allows a remote attacker who has compromised the renderer process to spoof UI elements through the use of crafted network traffic. Recommendations...

PT-2026-88670

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in SiteIsolation allows a remote attacker to bypass site isolation using a crafted file. This requires the attacker to have already compromised the renderer...

PT-2026-88672

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An injection issue in DevTools allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox by using a crafted HTML page...

PT-2026-88680

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in WebAppInstalls allows a remote attacker to bypass site isolation using a crafted HTML page. This requires the attacker to have already compromised the rendere...

PT-2026-88682

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A confused deputy issue in DataTransfer allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox by using a crafted HT...

PT-2026-88689

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in SiteIsolation allows a remote attacker who has compromised the renderer process to bypass system access restrictions by using a crafted HTML page. SiteIsolati...

PT-2026-88694

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in DataTransfer allows a remote attacker who has compromised the renderer process to obtain sensitive information through a crafted HTML page. Recommendations...

PT-2026-88705

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Missing authorization in the Contacts component allows a remote attacker to potentially obtain sensitive information. This requires the attacker to have already compromised the renderer...

PT-2026-88706

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Missing authorization in SiteIsolation allows a remote attacker who has compromised the renderer process to bypass site isolation by using a crafted HTML page. Site isolation is a...

PT-2026-88714

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in the ServiceWorker allows a remote attacker who has compromised the renderer process to bypass the web origin policy using a crafted HTML page. The web origin...

PT-2026-88716

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Improper initialization in Views on Windows allows a remote attacker to potentially execute arbitrary code outside the sandbox. This requires the attacker to have already compromised th...

PT-2026-88718

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An incorrect reference resolution in Storage on Windows allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox by...

PT-2026-88551

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An information leak exists in the Downloads component. A remote attacker who has compromised the renderer process can obtain cross-origin data by using a crafted HTML page...

PT-2026-88553

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A confused deputy issue in BackgroundFetch allows a remote attacker who has compromised the renderer process to leak sensitive information through a crafted HTML page. A confused deputy...

PT-2026-88565

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in the Downloads component allows a remote attacker who has compromised the renderer process to spoof UI elements by using a crafted HTML page. Recommendations...

PT-2026-88571

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in the ServiceWorker allows a remote attacker who has compromised the renderer process to bypass site isolation by using a crafted HTML page. Site isolation is a...

PT-2026-88572

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Improper input validation in FedCM Federated Credential Management, an API that allows users to sign into websites using their existing accounts from other providers allows a remote...

PT-2026-88580

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue exists in the Printing component. This occurs when a program continues to use a pointer after the memory it points to has been freed, which can lead to crashes or...

PT-2026-88585

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in Cross-Origin Resource Sharing CORS, a mechanism that allows restricted resources on a web page to be requested from another domain, enables a remote attacker...