PT-2026-85240

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.82 Description A type confusion issue exists in the Compositing component. This allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to visit a specially crafted...

PT-2026-85242

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.82 Description Improper resource exposure in CacheStorage allows a remote attacker to execute arbitrary code inside the sandbox by using a crafted HTML page. Recommendations Update Google Chrome to...

PT-2026-85239

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.82 Description An out of bounds write occurs in WebGL, which is a JavaScript API for rendering high-performance interactive 3D and 2D graphics within any compatible web browser. This issue...

PT-2026-85237

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.82 Description A use after free issue exists in the Compositing component. This allows a remote attacker who has already compromised the renderer process to execute arbitrary code outside the sandbox ...

Linux Distros Unpatched Vulnerability : CVE-2026-84359

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in Skia in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to leak cross-origin data vi...

Linux Distros Unpatched Vulnerability : CVE-2026-84355

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Navigation in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to bypass web...

Linux Distros Unpatched Vulnerability : CVE-2026-84333

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Dawn in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a craft...

PT-2026-85231

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.82 Description A use after free issue in DevTools allows a remote attacker to execute arbitrary code outside the sandbox by inducing the user to open a crafted HTML page. Use after free is a memory...

PT-2026-85236

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 152.0.7977.82 Description Improper input validation in the Transactions Platform allows a remote attacker to potentially execute arbitrary code outside the sandbox when a user visits a crafted HTML page...

PT-2026-85234

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.82 Description A race condition in the V8 engine allows a remote attacker to execute arbitrary code within the sandbox by inducing the victim to open a specially crafted HTML page. A race condition...

Linux Distros Unpatched Vulnerability : CVE-2026-84334

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.75 allowed a local attacker to execute arbitrary code outside the sandb...

Google Chrome < 152.0.7977.82 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 152.0.7977.82. It is, therefore, affected by multiple vulnerabilities as referenced in the 202609stable-channel-update-for-desktop01882797386 advisory. - Use after free in Skia. CVE-2026-85049 - Improper input validatio...

Linux Distros Unpatched Vulnerability : CVE-2026-84324

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Proxy in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network...

Google Chrome < 152.0.7977.82 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 152.0.7977.82. It is, therefore, affected by multiple vulnerabilities as referenced in the 202609stable-channel-update-for-desktop01882797386 advisory. - Use after free in Skia. CVE-2026-85049 - Improper input validation ...

PT-2026-85235

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.82 Description A high-severity type confusion issue exists in the V8 JavaScript and WebAssembly engine. This flaw occurs when the V8 optimizer incorrectly validates the element type of an array during...

VulnCheck KEV: CVE-2026-85046

Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-85232

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.82 Description Incomplete cleanup within the Network component allows a remote attacker to bypass system access restrictions by sending specially crafted network traffic. Recommendations Update Google...

PT-2026-85241

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.82 Description An out of bounds read exists in the CrashReporting component. This allows a remote attacker who has already compromised the renderer process to read memory outside the sandbox by using ...

Linux Distros Unpatched Vulnerability : CVE-2026-84358

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper privilege management in Downloads in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to spoof...

Linux Distros Unpatched Vulnerability : CVE-2026-84347

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...