PT-2026-66099

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An inappropriate implementation in Isolated Web Apps allows a remote attacker to bypass navigation restrictions by using a crafted HTML page. Recommendations Update Google Chrome to...

PT-2026-66101

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 151.0.7922.72 Description An issue in the security user interface allows a remote attacker to spoof the contents of the Omnibox the browser URL bar by using a specially crafted HTML page. Recommendations...

PT-2026-66102

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An inappropriate implementation in the Loader allows a remote attacker to leak cross-origin data through the use of a crafted HTML page. Cross-origin data leakage occurs when a website...

PT-2026-66107

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An inappropriate implementation in Blink, the browser engine used by Google Chrome, allows a remote attacker to leak cross-origin data through the use of a crafted HTML page. Cross-orig...

PT-2026-66111

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An inappropriate implementation in the Credential Management component allows a remote attacker to perform UI spoofing by using a crafted HTML page. Recommendations Update Google Chrome...

Linux Distros Unpatched Vulnerability : CVE-2026-17868

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient policy enforcement in USB in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform privilege escalation via a crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-17986

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient policy enforcement in Bluetooth in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypas...

CVE-2026-17758: Heap-based Buffer Overflow

Heap buffer overflow in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17897: Origin Validation Error

Inappropriate implementation in ORB in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

Linux Distros Unpatched Vulnerability : CVE-2026-17684

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker who had compromised the...

CVE-2026-17915: User Interface (UI) Misrepresentation of Critical Information

Inappropriate implementation in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

PT-2026-66120

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An out of bounds read and write issue exists in ANGLE, which could allow a remote attacker to potentially perform a sandbox escape by using a crafted HTML page. A sandbox escape is a...

PT-2026-66059

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An uninitialized use in ANGLE Almost Native Graphics Layer Engine, a compatibility layer that allows OpenGL ES APIs to run on non-native platforms allows a remote attacker to leak...

CVE-2026-17771: Use of Uninitialized Variable

Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17717: Integer Overflow or Wraparound

Integer overflow in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

PT-2026-65986

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An uninitialized use in ANGLE Almost Native Graphics Layer Engine, a compatibility layer that allows OpenGL ES APIs to run on non-native platforms allows a remote attacker to leak...

PT-2026-66016

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description A type confusion issue exists in ANGLE, a compatibility layer that translates OpenGL calls to other graphics APIs. This flaw allows a remote attacker to potentially perform a sandbox...

PT-2026-66090

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An uninitialized use in Skia allows a remote attacker to leak cross-origin data through a crafted HTML page. Skia is a 2D graphics library used for rendering text and images...

PT-2026-66069

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description A use after free issue in ANGLE allows a remote attacker to potentially perform a sandbox escape by using a crafted HTML page. Use after free is a memory corruption flaw that occurs whe...

PT-2026-66037

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description A use after free issue in ANGLE allows a remote attacker to potentially perform a sandbox escape by using a crafted HTML page. Use after free is a memory corruption flaw that occurs whe...