PT-2026-81771

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the USB component allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering to entice a user to visit a...

PT-2026-81837

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A UI misrepresentation in Geometry allows a remote attacker to spoof UI elements by using a crafted HTML page. Recommendations Update to version 152.0.7977.65 or later...

PT-2026-81720

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the browser allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded from one...

PT-2026-81758

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use after free issue in the Platform component allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to visit a specially crafted HTML page. Use...

PT-2026-81601

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the Device component allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering to entice a user to visi...

PT-2026-81830

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An information leak in the Document Object Model DOM allows a remote attacker to obtain sensitive information. This is achieved by leveraging social engineering to entice a user to visi...

PT-2026-81553

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An information leak in the Core component allows a remote attacker who has compromised the renderer process to bypass site isolation. This is achieved by using a crafted HTML page. Site...

PT-2026-81627

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An observable discrepancy in the Autofill feature allows a remote attacker to obtain sensitive information through the use of a crafted HTML page. Recommendations Update Google Chrome t...

PT-2026-81538

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An information leak in Canvas allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded from one origin can...

PT-2026-81682

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An information leak in the Payments component allows a remote attacker to obtain cross-origin data by using a crafted HTML page. Cross-origin data refers to information belonging to a...

PT-2026-81532

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A race condition in the V8 engine allows a remote attacker to execute arbitrary code within the sandbox by using a specially crafted HTML page. A race condition occurs when the timing o...

PT-2026-81793

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description UI misrepresentation in CustomTabs allows a remote attacker to spoof the address bar by using a crafted HTML page. Recommendations Update Google Chrome on Android to version...

PT-2026-81817

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use after free issue in Views allows a remote attacker to execute arbitrary code outside the sandbox by inducing the user to visit a crafted HTML page. Use after free is a memory...

PT-2026-81616

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An information leak exists in FoldableAPIs that allows a remote attacker to obtain sensitive information by using a crafted HTML page. Recommendations Update Google Chrome to version...

PT-2026-81828

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An uninitialized resource in ANGLE Almost Native Graphics Layer Engine, a compatibility layer that allows OpenGL ES APIs to run on non-native platforms allows a remote attacker to...

PT-2026-81542

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description UI misrepresentation in the browser allows a remote attacker to spoof UI elements by using a crafted HTML page. Recommendations Update Google Chrome to version 152.0.7977.65 or later...

PT-2026-81610

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use-after-free issue exists in the Safebrowsing component of Google Chrome on Mac. A remote attacker can leverage social engineering to execute arbitrary code outside the sandbox by...

PT-2026-81661

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An incorrect reference resolution in the Cache allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded fro...

PT-2026-81577

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An externally controlled reference in the QUIC protocol allows a remote attacker to bypass the web origin policy through the use of a crafted HTML page. QUIC is a transport layer networ...

PT-2026-81799

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description An out of bounds read exists in Tint, which allows a remote attacker to potentially read memory inside the sandbox by using a crafted HTML page. An out of bounds read occurs...