PT-2026-66186

Insufficient validation of untrusted input in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

PT-2026-66195

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An inappropriate implementation in the Payments component allows a remote attacker to leak cross-origin data, which is information from a different origin than the one serving the page,...

PT-2026-66265

Uninitialized Use in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

PT-2026-66280

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.72 Description An inappropriate implementation in the Session component allows a remote attacker to bypass navigation restrictions by using a crafted HTML page. Recommendations Update Googl...

PT-2026-66282

Inappropriate implementation in SVG in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

PT-2026-66284

Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

PT-2026-66043

Race in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: High...

PT-2026-66046

Out of bounds write in WebGL in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

PT-2026-66071

Name of the Vulnerable Software and Affected Versions Google Chrome on Mac versions prior to 151.0.7922.72 Description A use after free issue exists in Views, which could allow a remote attacker to cause heap corruption through a specially crafted HTML page. Use after free is a memory corruption...

PT-2026-66129

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An uninitialized use in Dawn allows a remote attacker to leak cross-origin data through a crafted HTML page. Dawn is a WebGPU implementation for Chromium. Recommendations Update Google...

PT-2026-66187

Insufficient policy enforcement in USB in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: Medium...

PT-2026-66197

Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Medium...

PT-2026-66205

Use after free in Enterprise in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

PT-2026-66211

Inappropriate implementation in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

PT-2026-65999

Name of the Vulnerable Software and Affected Versions Google Chrome on ChromeOS versions prior to 151.0.7922.72 Description A heap buffer overflow occurs in the Color component. This issue allows a remote attacker who has already compromised the renderer process to potentially achieve a sandbox...

PT-2026-66013

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description A use after free issue in the DOM Document Object Model allows a remote attacker to execute arbitrary code within a sandbox by inducing the user to open a specially crafted HTML page. U...

PT-2026-66060

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.72 Description Insufficient validation of untrusted input in the WebView component allows a remote attacker to potentially perform a sandbox escape by using a crafted HTML page. A sandbox...

PT-2026-66107

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An inappropriate implementation in Blink, the browser engine used by Google Chrome, allows a remote attacker to leak cross-origin data through the use of a crafted HTML page. Cross-orig...

PT-2026-66148

Insufficient policy enforcement in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

PT-2026-66212

Insufficient validation of untrusted input in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...