PT-2026-79130

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.173 Description A buffer overflow in the Network component allows a remote attacker to execute arbitrary code outside the sandbox by inducing the user to visit a crafted HTML page. A buffer overflow...

Stable Channel Update for Desktop

The Stable channel has been updated to 151.0.7922.173/.174 for Windows and Mac and 151.0.7922.173 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security Fixes and Rewards Note: Access to bug details and links may be kept...

PT-2026-79127

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.173 Description Incorrect authorization in Workers allows a remote attacker who has compromised the renderer process and used social engineering to bypass the web origin policy through a crafted HTML...

PT-2026-79131

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.173 Description Improper resource control in Linux Toolkit Theming allows a remote attacker who has compromised the renderer process to execute arbitrary code outside the sandbox by using a crafted HT...

Google Chrome < 151.0.7922.173 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 151.0.7922.173. It is, therefore, affected by multiple vulnerabilities as referenced in the 202608stable-channel-update-for-desktop0404570826 advisory. - Use after free in DOM in Google Chrome prior to 151.0.7922.173...

PT-2026-79374

Name of the Vulnerable Software and Affected Versions PassPortal browser extension versions prior to 3.49.6 Description An unvalidated postMessage vulnerability in the PassPortal browser extension allows for authentication abuse. This flaw enables any website or iframe viewed by a user to obtain...

PT-2026-79126

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.173 Description A privilege elevation issue exists in the Import component. A remote attacker could use social engineering to trick a user into opening a crafted file, potentially allowing the executi...

PT-2026-79125

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.173 Description A use after free issue in Chromoting allows a remote attacker to execute arbitrary code outside the sandbox by sending crafted network traffic. Use after free is a memory corruption fl...

PT-2026-79128

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.173 Description A race condition in the V8 engine allows a remote attacker to execute arbitrary code within the sandbox by inducing the victim to open a specially crafted HTML page. A race condition...

KLA91233 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Chromoting can be...

Google Chrome < 151.0.7922.173 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 151.0.7922.173. It is, therefore, affected by multiple vulnerabilities as referenced in the 202608stable-channel-update-for-desktop0404570826 advisory. - Use after free in DOM in Google Chrome prior to 151.0.7922.173...

CVE-2026-76045

A flaw was found in WebGL in Google Chrome. This use-after-free vulnerability allows a remote attacker to execute arbitrary code within the browser's sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page, leading to a high-severity security risk...

Update Chrome now: Two critical vulnerabilities fixed

Chrome is rolling out an update for its desktop versions. The update includes 15 security fixes, two of which address critical buffer overflow vulnerabilities. The stable channel has been updated to 151.0.7922.169/.170 for Windows and Mac, and 151.0.7922.169 for Linux. How to update Chrome If you...

CVE-2026-76042

A flaw was found in Google Chrome, specifically within its GPU component, where an uninitialized resource could be used. A remote attacker, after compromising the renderer process, could exploit this by crafting a malicious HTML page. This could allow the attacker to read memory outside of the...

CVE-2026-76038

A flaw was found in V8, the open-source JavaScript engine used in Google Chrome. This type confusion vulnerability allows a remote attacker to execute arbitrary code within the browser's security sandbox. Exploitation occurs when a user visits a specially crafted HTML page, leading to potential...

CVE-2026-76037

A flaw was found in Google Chrome. A local attacker could exploit a link following vulnerability within the CredentialProvider component. This vulnerability allows for the execution of arbitrary code outside the browser's security sandbox through a local program. Mitigation Mitigation for this...

CVE-2026-76035

A flaw was found in Media in Google Chrome. This inappropriate implementation allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page, leading to a compromise of the affected syste...

CVE-2026-76033

A flaw was found in Google Chrome's handling of Cross-Origin Resource Sharing CORS. A remote attacker, who has already compromised the browser's renderer process, could exploit this vulnerability by using a specially crafted HTML page. This could allow the attacker to bypass site isolation, a...

CVE-2026-76046

A flaw was found in ANGLE, a component used in Google Chrome on Android. A remote attacker, who has already compromised the renderer process, could exploit a buffer overflow vulnerability by tricking a user into visiting a specially crafted HTML page. This could allow the attacker to execute...

CVE-2026-76043

A flaw was found in the V8 component of Google Chrome. A remote attacker could exploit an incorrect calculation vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to arbitrary code execution within the browser's sandbox environment...