PT-2026-88612

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue exists in ANGLE on Windows. This occurs when a remote attacker induces the system to access memory after it has been freed, which can be triggered via a crafted...

PT-2026-88530

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A buffer overflow in WebRTC allows a remote attacker to potentially execute arbitrary code inside the sandbox by using a crafted HTML page. A buffer overflow occurs when a program write...

PT-2026-88594

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue in the Browser component allows a remote attacker to execute arbitrary code outside the sandbox. This is achieved by leveraging social engineering to entice a use...

PT-2026-88610

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Improper input validation in the FileAPI allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox by using a crafted...

PT-2026-88624

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue in Core allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox by using a crafted HTML page...

PT-2026-88564

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use-after-free issue exists in WebGL, which occurs when an application continues to use a pointer after it has been freed. This flaw allows a remote attacker to execute arbitrary code...

PT-2026-88555

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue in Aura allows a remote attacker to potentially execute arbitrary code outside the sandbox by inducing the user to visit a crafted HTML page. Use after free is a...

PT-2026-88560

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue in the Platform component allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to visit a crafted HTML page. Use after free ...

PT-2026-88653

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Improper input validation in SiteIsolation allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox by using a crafted...

PT-2026-88692

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An out of bounds read exists in Tint, which could allow a remote attacker to potentially read memory inside the sandbox by using a crafted HTML page. An out of bounds read occurs when t...

PT-2026-88704

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An out of bounds read occurs in ANGLE, a compatibility layer that allows OpenGL ES APIs to run on various graphics platforms. This issue allows a remote attacker who has already...

PT-2026-88716

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Improper initialization in Views on Windows allows a remote attacker to potentially execute arbitrary code outside the sandbox. This requires the attacker to have already compromised th...

PT-2026-88750

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An out of bounds read occurs in WebGL, which may allow a remote attacker to execute arbitrary code outside the sandbox by inducing the user to visit a crafted HTML page. An out of bound...

PT-2026-88757

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue in V8 allows a remote attacker who has compromised the renderer process to read memory inside the sandbox by using a crafted HTML page. Use after free is a memory...

PT-2026-88580

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue exists in the Printing component. This occurs when a program continues to use a pointer after the memory it points to has been freed, which can lead to crashes or...

PT-2026-88626

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue exists in the Passwords component. This allows a remote attacker to potentially execute arbitrary code outside the sandbox through UI interaction, provided they c...

PT-2026-88730

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An integer overflow in WebRTC allows a remote attacker to read memory inside the sandbox by using a crafted HTML page. An integer overflow occurs when an arithmetic operation attempts t...

PT-2026-88712

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A type confusion issue exists in V8, the open-source JavaScript and WebAssembly engine. This allows a remote attacker to execute arbitrary code within the sandbox by inducing the user t...

PT-2026-88647

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect reference resolution in the FileSystem component allows a remote attacker to potentially execute arbitrary code outside the sandbox. This is achieved by leveraging social...

USN-8732-1: Minetest vulnerability

It was discovered that Minetest did not properly sanitize the Lua sandbox environment when using LuaJIT. A malicious mod could escape the sandbox to execute arbitrary code and gain full file system access on the server. An attacker could use this issue to compromise the server...