PT-2026-81703

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the NTP Footer allows a remote attacker who has compromised the renderer process to bypass the web origin policy through a crafted HTML page. The web origin...

PT-2026-81718

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Media component allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox by using a...

PT-2026-81686

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An incorrect reference resolution in the Speech component allows a remote attacker who has already compromised the renderer process to bypass site isolation. This is achieved by using a...

PT-2026-81692

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Printing component allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox by using ...

PT-2026-81687

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Missing authorization in Sensor allows a remote attacker who has compromised the renderer process to obtain sensitive information through a crafted HTML page. Recommendations Update...

PT-2026-81732

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A race condition exists in the FileSystem component. A remote attacker who has already compromised the renderer process can potentially execute arbitrary code outside the sandbox by usi...

PT-2026-81695

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An out-of-bounds read exists in Skia, a graphics library. A remote attacker who has already compromised the renderer process can exploit this by using a crafted HTML page to read memory...

PT-2026-81735

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A type confusion issue exists in the Accessibility component. A remote attacker who has already compromised the renderer process can execute arbitrary code outside the sandbox by induci...

PT-2026-81776

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A buffer overflow exists in Blink, the rendering engine used by the browser. A remote attacker who has already compromised the renderer process can execute arbitrary code within the...

PT-2026-81737

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the Media component allows a remote attacker who has compromised the renderer process to bypass system access restrictions by using a crafted HTML page...

PT-2026-81744

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Missing authorization in the Preload feature allows a remote attacker who has compromised the renderer process to bypass the web origin policy through a crafted HTML page. The web origi...

PT-2026-81774

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Preload component allows a remote attacker who has compromised the renderer process to bypass the web origin policy through a crafted HTML page. The web...

PT-2026-81772

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Missing authorization in the Passwords component allows a remote attacker to bypass the web origin policy. This occurs when an attacker has compromised the renderer process and uses...

PT-2026-81778

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the Sandbox allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox by using a crafted HTM...

PT-2026-81770

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description A use after free issue exists in the Audio component. This allows a remote attacker who has already compromised the renderer process to execute arbitrary code outside the...

PT-2026-81751

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in SiteIsolation allows a remote attacker who has compromised the renderer process and used social engineering to bypass site isolation through a crafted HTML...

PT-2026-81734

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in Extensions allows a remote attacker who has compromised the renderer process to bypass the web origin policy—a security mechanism that restricts how a documen...

PT-2026-81831

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the FindInPage function allows a remote attacker who has compromised the renderer process to leak cross-origin data through a crafted HTML page...

PT-2026-81816

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description An externally controlled reference in the WebView component allows a remote attacker who has already compromised the renderer process to potentially execute arbitrary code...

PT-2026-81784

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use after free issue exists in Chromecast. A remote attacker who has compromised the renderer process can execute arbitrary code outside the sandbox by using a crafted HTML page. Use...