PT-2026-66223

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.72 Description Insufficient policy enforcement in the Near Field Communication NFC component allows a remote attacker to leak cross-origin data through a crafted HTML page. Cross-origin dat...

PT-2026-66229

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.72 Description Insufficient policy enforcement in the Near Field Communication NFC implementation allows a remote attacker to leak cross-origin data through a crafted HTML page. Cross-origi...

PT-2026-66257

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.72 Description An inappropriate implementation in the FullScreen feature allows a remote attacker to perform UI spoofing via a crafted HTML page. UI spoofing is a technique where an attacke...

PT-2026-66259

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.72 Description Insufficient validation of untrusted input in the Picture-in-Picture feature allows a remote attacker who has compromised the renderer process to potentially perform a sandbo...

PT-2026-66280

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.72 Description An inappropriate implementation in the Session component allows a remote attacker to bypass navigation restrictions by using a crafted HTML page. Recommendations Update Googl...

PT-2026-66283

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.72 Description An incorrect security user interface implementation allows a remote attacker to perform domain spoofing by using a crafted HTML page. Recommendations Update Google Chrome on...

PT-2026-66319

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.72 Description Insufficient policy enforcement in the USB implementation allows a remote attacker who has compromised the renderer process to leak cross-origin data through a crafted HTML...

PT-2026-65970

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.72 Description Insufficient validation of untrusted input in Dawn allows a remote attacker to potentially perform a sandbox escape via a crafted HTML page. A sandbox escape is a technique...

PT-2026-65982

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.72 Description Insufficient validation of untrusted input in the GPU allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted...

PT-2026-66000

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.72 Description Insufficient validation of untrusted input in Web Authentication allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via...

PT-2026-66009

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.72 Description Insufficient validation of untrusted input in the PDF component allows a local attacker to leak cross-origin data through a crafted HTML page. Cross-origin data leakage occur...

PT-2026-66017

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.72 Description Insufficient validation of untrusted input in the UI allows a local attacker to leak cross-origin data through a crafted HTML page. Cross-origin data leakage occurs when a...

PT-2026-66032

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.72 Description Insufficient validation of untrusted input in the Accessibility component allows a remote attacker who has compromised the renderer process to potentially perform a sandbox...

PT-2026-66041

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.72 Description An object lifecycle issue in the WebView component allows a remote attacker who has already compromised the renderer process to potentially perform a sandbox escape. This is...

PT-2026-66050

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.72 Description An improper implementation in the Autofill feature allows a remote attacker to leak cross-origin data, which is data belonging to a different origin than the one serving the...

PT-2026-66052

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.72 Description An inappropriate implementation in the QUIC protocol allows a remote attacker to leak cross-origin data through the use of a crafted HTML page. QUIC is a transport layer...

PT-2026-66055

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.72 Description Insufficient validation of untrusted input in the WebView component allows a remote attacker who has already compromised the renderer process to potentially perform a sandbox...

PT-2026-66056

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.72 Description A use after free issue exists in the Bluetooth component. A remote attacker who has already compromised the renderer process can potentially achieve a sandbox escape by using...

PT-2026-66060

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.72 Description Insufficient validation of untrusted input in the WebView component allows a remote attacker to potentially perform a sandbox escape by using a crafted HTML page. A sandbox...

PT-2026-66066

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.72 Description Insufficient validation of untrusted input in the Payments component allows a remote attacker who has compromised the renderer process to perform UI spoofing by using a craft...