PT-2026-106939

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A confused deputy issue in Contextual Tasks allows a remote attacker who has compromised the renderer process to bypass the web origin policy. This is achieved by using a crafted HTML...

PT-2026-106946

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An uninitialized resource in the Video component allows a remote attacker who has already compromised the renderer process to read memory outside the sandbox by using a specially crafte...

PT-2026-106944

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Missing authorization in Workers allows a remote attacker who has compromised the renderer process to bypass site isolation by using a crafted PDF file. Site isolation is a security...

PT-2026-106920

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A buffer overflow exists in ANGLE, a compatibility layer that allows OpenGL ES APIs to run on various graphics platforms. This issue allows a remote attacker who has already compromised...

PT-2026-106980

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incorrect authorization in the Network component allows a remote attacker who has compromised the renderer process to bypass system access restrictions by using a crafted HTML page...

PT-2026-106966

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Type confusion in ANGLE allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Type confusi...

PT-2026-106992

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A use of released resource in the UI allows a remote attacker who has compromised the renderer process to spoof UI elements by using a crafted HTML page. Recommendations Update Google...

PT-2026-106983

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A use of released resource in FontAccess allows a remote attacker who has compromised the renderer process to bypass the web origin policy through a crafted HTML page. The web origin...

PT-2026-106965

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A buffer overflow exists in the Fonts component. A remote attacker who has already compromised the renderer process can potentially execute arbitrary code outside the sandbox by using a...

PT-2026-106963

Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

PT-2026-107041

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Missing authorization in the Translate feature allows a remote attacker who has compromised the renderer process to bypass site isolation by using a crafted HTML page. Site isolation is...

PT-2026-107042

Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

PT-2026-107049

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A race condition in Fonts allows a remote attacker who has compromised the renderer process to execute arbitrary code outside the sandbox by using a crafted HTML page. A race condition...

PT-2026-107036

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incorrect authorization in the Omnibox allows a remote attacker who has compromised the renderer process to obtain sensitive information by using a crafted HTML page. Recommendations...

PT-2026-107035

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Missing authorization in FullScreen allows a remote attacker who has compromised the renderer process and used social engineering to bypass system access restrictions through a crafted...

PT-2026-106972

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Improper input validation in WebAudio allows a remote attacker who has compromised the renderer process to bypass system access restrictions through a crafted HTML page. Recommendations...

PT-2026-106968

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incorrect authorization in the Unbounded Element allows a remote attacker who has compromised the renderer process to spoof UI elements by using a crafted HTML page. Recommendations...

PT-2026-106973

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A race condition exists in CacheStorage. This issue allows a remote attacker who has already compromised the renderer process to read memory outside the sandbox by using a specially...

PT-2026-107096

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An information leak exists in the Audio component. A remote attacker who has already compromised the renderer process can read memory outside the sandbox by using a specially crafted...

PT-2026-107085

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A race condition in the Browser component allows a remote attacker who has already compromised the renderer process to spoof UI elements by using a specially crafted HTML page. A race...