PT-2026-81599

Name of the Vulnerable Software and Affected Versions Google Chrome on Mac versions prior to 152.0.7977.65 Description An information leak exists in the Bluetooth component. A remote attacker who has compromised the renderer process and uses social engineering can obtain sensitive information by...

PT-2026-81600

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in SiteIsolation allows a remote attacker who has compromised the renderer process to bypass site isolation by using a crafted HTML page. Site isolation is a...

PT-2026-81602

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An out of bounds read exists in the Media component. This allows a remote attacker who has already compromised the renderer process to read memory outside the sandbox by using a special...

PT-2026-81603

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the StorageAccessAPI allows a remote attacker who has compromised the renderer process to bypass the web origin policy through a crafted HTML page. The web...

PT-2026-81605

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An uninitialized resource in the GPU allows a remote attacker who has compromised the renderer process to potentially read memory outside the sandbox by using a crafted HTML page...

PT-2026-81608

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use-after-free issue exists in the Network component where an operation is performed on a resource after it has been expired or released. A remote attacker who has already compromised...

PT-2026-81612

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A race condition in the Autofill component allows a remote attacker who has already compromised the renderer process to bypass the web origin policy. This is achieved by using a special...

PT-2026-81619

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Missing authorization in InterestGroups allows a remote attacker who has compromised the renderer process to bypass system access restrictions by using a crafted PDF file. Recommendatio...

PT-2026-81623

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in Workers allows a remote attacker who has compromised the renderer process to bypass system access restrictions by using a crafted HTML page. Recommendations...

PT-2026-81647

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Missing authorization in Lighthouse allows a remote attacker who has compromised the renderer process and used social engineering to bypass site isolation through a crafted HTML page...

PT-2026-81648

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use after free issue exists in Chromecast. A remote attacker who has compromised the renderer process can execute arbitrary code outside the sandbox by using a crafted HTML page. Use...

PT-2026-81652

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Missing authorization in the password handling mechanism allows a remote attacker who has compromised the renderer process to spoof UI elements by using a crafted HTML page...

PT-2026-81656

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Network component allows a remote attacker who has compromised the renderer process to bypass the web origin policy through a crafted HTML page. The web...

PT-2026-81657

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in Navigation allows a remote attacker who has compromised the renderer process to bypass site isolation through a crafted HTML page. Site isolation is a...

PT-2026-81658

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Missing authorization in the Network component allows a remote attacker who has compromised the renderer process to bypass system access restrictions by using a crafted HTML page...

PT-2026-81670

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the Transactions Platform allows a remote attacker who has compromised the renderer process to bypass the web origin policy through a crafted HTML page. The w...

PT-2026-81671

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper enforcement of behavioral workflow in Media allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox via a...

PT-2026-81673

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Missing authorization in the Network component allows a remote attacker who has compromised the renderer process to bypass the web origin policy through a crafted HTML page. The web...

PT-2026-81687

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Missing authorization in Sensor allows a remote attacker who has compromised the renderer process to obtain sensitive information through a crafted HTML page. Recommendations Update...

PT-2026-81689

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the input component allows a remote attacker to bypass the web origin policy. This occurs when an attacker has already compromised the renderer process and...