PT-2026-81671

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper enforcement of behavioral workflow in Media allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox via a...

PT-2026-81633

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 152.0.7977.65 Description A use after free issue exists where a remote attacker can execute arbitrary code outside the sandbox by sending crafted network traffic. Use after free is a memory corruption fla...

PT-2026-81610

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use-after-free issue exists in the Safebrowsing component of Google Chrome on Mac. A remote attacker can leverage social engineering to execute arbitrary code outside the sandbox by...

PT-2026-81534

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A type confusion issue exists in ANGLE, a compatibility layer that translates OpenGL calls to other graphics APIs. This flaw allows a remote attacker to potentially execute arbitrary co...

PT-2026-81597

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper privilege management in the Navigation component allows a remote attacker to potentially execute arbitrary code outside the sandbox. This occurs if the attacker has already...

PT-2026-81799

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description An out of bounds read exists in Tint, which allows a remote attacker to potentially read memory inside the sandbox by using a crafted HTML page. An out of bounds read occurs...

PT-2026-81709

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description A use after free issue exists in Sessions, which allows a remote attacker to execute arbitrary code outside the sandbox through UI interaction and social engineering. Use aft...

PT-2026-81719

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use after free issue exists in Views. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote attacker can exploit...

PT-2026-81742

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Media component allows a remote attacker to potentially execute arbitrary code outside the sandbox by inducing a user to visit a crafted HTML page...

PT-2026-81748

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An out-of-bounds write in ANGLE allows a remote attacker to potentially execute arbitrary code outside the sandbox when a user opens a crafted HTML page. ANGLE Almost Native Graphics...

PT-2026-81591

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An incorrect reference resolution in the FileSystem component allows a remote attacker to potentially execute arbitrary code outside the sandbox. This is achieved by leveraging social...

RHEL 8 : webkit2gtk3 (RHSA-2026:59325)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:59325 advisory. WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: Mozilla: Arbitrary JavaScript...

UBUNTU-CVE-2026-65915

NLTK versions before 3.10.0 contain a logic bug in FileSystemPathPointer.open where the sandbox validation check compares a normalized path against itself, making the security check permanently inert. Attackers can pass file:// URLs to nltk.data.load to read arbitrary files accessible to the...

PT-2026-81735

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A type confusion issue exists in the Accessibility component. A remote attacker who has already compromised the renderer process can execute arbitrary code outside the sandbox by induci...

PT-2026-81511

Name of the Vulnerable Software and Affected Versions NVIDIA OpenShell for Linux affected versions not specified Description A flaw in NVIDIA OpenShell for Linux allows an attacker to perform a sandbox escape, which is a process of breaking out of a restricted execution environment to access the...

PT-2026-81602

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An out of bounds read exists in the Media component. This allows a remote attacker who has already compromised the renderer process to read memory outside the sandbox by using a special...

PT-2026-81718

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Media component allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox by using a...

PT-2026-81914

Name of the Vulnerable Software and Affected Versions Kimai versions prior to 2.53.0 Description The Twig invoice template sandbox fails to block sensitive User methods. This allows users with template creation permissions to call the getApiToken and getPlainApiToken functions, leading to the...

PT-2026-81721

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description A buffer overflow exists in ANGLE, a compatibility layer that translates OpenGL ES calls to other graphics APIs. This flaw allows a remote attacker to execute arbitrary code...

PT-2026-81743

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use after free issue exists in the Accessibility component. This flaw allows a remote attacker to execute arbitrary code outside the sandbox through UI interaction, typically leverage...