PT-2026-88595

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An information leak exists in the Scroll component. A remote attacker who has compromised the renderer process can leak cross-origin data by using a crafted HTML page. Recommendations...

PT-2026-88596

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A UI misrepresentation issue in the browser allows a remote attacker to spoof UI elements using a crafted HTML page through social engineering. Recommendations Update Google Chrome to...

PT-2026-88599

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in the Network component allows a remote attacker who has compromised the renderer process to bypass site isolation by using a crafted HTML page. Site isolation ...

PT-2026-88601

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description UI misrepresentation in the Passwords component allows a remote attacker to spoof UI elements by using a crafted HTML page. Recommendations Update Google Chrome to version 153.0.8010.36...

PT-2026-88693

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An information leak exists in the Editing component that allows a remote attacker to obtain sensitive information by inducing a user to visit a crafted HTML page. Recommendations Update...

PT-2026-88696

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An out of bounds read exists in ANGLE, a compatibility layer that allows OpenGL ES APIs to run on various graphics platforms. This issue allows a remote attacker to read memory outside...

PT-2026-88702

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An out of bounds read exists in ANGLE, a compatibility layer that allows OpenGL ES APIs to run on non-native platforms. This issue allows a remote attacker to potentially read memory...

PT-2026-88703

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Missing authorization in the FileSystem component allows a remote attacker to bypass system access restrictions by using a crafted HTML page. Recommendations Update Google Chrome to...

PT-2026-88704

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An out of bounds read occurs in ANGLE, a compatibility layer that allows OpenGL ES APIs to run on various graphics platforms. This issue allows a remote attacker who has already...

PT-2026-88706

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Missing authorization in SiteIsolation allows a remote attacker who has compromised the renderer process to bypass site isolation by using a crafted HTML page. Site isolation is a...

PT-2026-88578

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An observable discrepancy in the Autofill feature allows a remote attacker to obtain sensitive information by using a crafted HTML page. Recommendations Update Google Chrome to version...

PT-2026-88639

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An observable discrepancy in the Network component allows a remote attacker to obtain cross-origin data by using a crafted HTML page. Cross-origin data refers to information from a...

PT-2026-88642

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue in Input allows a remote attacker to execute arbitrary code inside the sandbox by using a crafted HTML page. Use after free is a memory corruption flaw that occur...

PT-2026-88649

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incomplete cleanup in the Downloads component allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering to entice a user to visit ...

PT-2026-88659

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description UI misrepresentation in the user interface allows a remote attacker to spoof UI elements via a crafted HTML page by leveraging social engineering. Recommendations Update Google Chrome t...

PT-2026-88660

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Missing authorization in the Browser component allows a remote attacker to bypass system access restrictions by using a crafted HTML page. Recommendations Update Google Chrome to versio...

PT-2026-88663

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An origin validation error in the Paint component allows a remote attacker to obtain cross-origin data by using a crafted HTML page. Origin validation is a security mechanism that ensur...

PT-2026-88666

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An observable discrepancy in the Layout component allows a remote attacker to leak sensitive information by inducing a user to visit a crafted HTML page. Recommendations Update Google...

PT-2026-88669

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Missing authorization in Views allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering to entice a user to visit a crafted HTML...

PT-2026-88672

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An injection issue in DevTools allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox by using a crafted HTML page...