PT-2026-106946

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An uninitialized resource in the Video component allows a remote attacker who has already compromised the renderer process to read memory outside the sandbox by using a specially crafte...

PT-2026-106968

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incorrect authorization in the Unbounded Element allows a remote attacker who has compromised the renderer process to spoof UI elements by using a crafted HTML page. Recommendations...

PT-2026-106976

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An observable discrepancy in the Autofill AI allows a remote attacker to obtain sensitive information. This occurs when an attacker has compromised the renderer process and uses social...

PT-2026-106983

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A use of released resource in FontAccess allows a remote attacker who has compromised the renderer process to bypass the web origin policy through a crafted HTML page. The web origin...

PT-2026-107042

Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

PT-2026-107049

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A race condition in Fonts allows a remote attacker who has compromised the renderer process to execute arbitrary code outside the sandbox by using a crafted HTML page. A race condition...

PT-2026-107075

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incorrect authorization in the Accessibility component allows a remote attacker who has compromised the renderer process to bypass site isolation by using a crafted HTML page. Site...

PT-2026-107079

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incorrect authorization in the GetUserMedia function allows a remote attacker who has compromised the renderer process to bypass system access restrictions by using a crafted HTML page...

PT-2026-107096

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An information leak exists in the Audio component. A remote attacker who has already compromised the renderer process can read memory outside the sandbox by using a specially crafted...

PT-2026-106939

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A confused deputy issue in Contextual Tasks allows a remote attacker who has compromised the renderer process to bypass the web origin policy. This is achieved by using a crafted HTML...

PT-2026-107050

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A privilege elevation issue exists within the sandbox of Google Chrome on Mac. A remote attacker who has already compromised the renderer process can execute arbitrary code outside the...

PT-2026-107056

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Missing authorization in SiteIsolation allows a remote attacker who has compromised the renderer process to bypass site isolation by using a crafted HTML page. Site isolation is a...

PT-2026-107063

Incorrect authorization in WebShare in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

PT-2026-106860

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Improper input validation in Viz allows a remote attacker who has compromised the renderer process to bypass system access restrictions by using a crafted HTML page. Recommendations...

PT-2026-106873

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Missing authorization in the FileSystem component allows a remote attacker who has compromised the renderer process to bypass the web origin policy, which is a security mechanism that...

PT-2026-106906

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A use after free issue exists in Metrics. This allows a remote attacker who has already compromised the renderer process to execute arbitrary code outside the sandbox by using a special...

PT-2026-106944

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Missing authorization in Workers allows a remote attacker who has compromised the renderer process to bypass site isolation by using a crafted PDF file. Site isolation is a security...

PT-2026-106952

Incorrect reference resolution in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...

PT-2026-106963

Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

PT-2026-106966

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Type confusion in ANGLE allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Type confusi...