PT-2026-66054

Insufficient validation of untrusted input in BFCache in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

PT-2026-66065

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description A use after free issue exists in the GPU component on Mac. A remote attacker who has already compromised the renderer process can potentially achieve a sandbox escape by inducing the...

PT-2026-66259

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.72 Description Insufficient validation of untrusted input in the Picture-in-Picture feature allows a remote attacker who has compromised the renderer process to potentially perform a sandbo...

PT-2026-66276

Inappropriate implementation in CORS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

PT-2026-66307

Insufficient validation of untrusted input in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

PT-2026-66323

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description Insufficient policy enforcement in the Speech component allows a remote attacker who has compromised the renderer process to leak cross-origin data through a crafted HTML page...

PT-2026-66064

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An out-of-bounds read in Skia allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape by using a crafted HTML page. An out-of-bounds re...

PT-2026-66084

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An inappropriate implementation in WebProtect allows a remote attacker who has compromised the renderer process to leak cross-origin data through the use of a crafted HTML page...

PT-2026-65994

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An out-of-bounds write in ANGLE allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. ANGLE Almost Native...

PT-2026-66000

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.72 Description Insufficient validation of untrusted input in Web Authentication allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via...

Linux Distros Unpatched Vulnerability : CVE-2026-17809

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer...

Linux Distros Unpatched Vulnerability : CVE-2026-17767

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the...

PT-2026-66150

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description Insufficient validation of untrusted input in the Passwords component allows a remote attacker who has compromised the renderer process to perform UI spoofing through a crafted HTML pag...

PT-2026-66175

Name of the Vulnerable Software and Affected Versions Google Chrome on Mac versions prior to 151.0.7922.72 Description An inappropriate implementation in the Network component allows a remote attacker who has already compromised the renderer process to potentially perform a sandbox escape. This i...

PT-2026-66172

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An inappropriate implementation in DevTools allows a remote attacker who has compromised the renderer process to inject scripts or HTML into a privileged page by using a crafted HTML...

PT-2026-66185

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.72 Description A type confusion issue exists in the Tab component. A remote attacker who has already compromised the renderer process can potentially achieve a sandbox escape by using a...

PT-2026-66235

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description Insufficient policy enforcement in Settings allows a remote attacker who has compromised the renderer process to perform privilege escalation by using a crafted HTML page. Recommendatio...

PT-2026-66265

Uninitialized Use in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

PT-2026-66174

Name of the Vulnerable Software and Affected Versions Google Chrome on Mac versions prior to 151.0.7922.72 Description A race condition in DevTools allows a remote attacker who has already compromised the renderer process to potentially perform a sandbox escape. This is achieved by using a crafte...

PT-2026-66003

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 151.0.7922.72 Description Insufficient validation of untrusted input allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. A...