PT-2026-66136

Inappropriate implementation in ReportingAndNEL in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

PT-2026-66145

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

PT-2026-66015

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description A side-channel information leakage issue exists in the Media component. This flaw allows a remote attacker to leak cross-origin data, which is data belonging to a different origin than...

PT-2026-66050

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.72 Description An improper implementation in the Autofill feature allows a remote attacker to leak cross-origin data, which is data belonging to a different origin than the one serving the...

PT-2026-66127

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.72 Description An uninitialized use in WebGL allows a remote attacker to leak cross-origin data through a crafted HTML page. WebGL is a JavaScript API for rendering high-performance...

PT-2026-66204

Inappropriate implementation in Paint in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

PT-2026-66223

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.72 Description Insufficient policy enforcement in the Near Field Communication NFC component allows a remote attacker to leak cross-origin data through a crafted HTML page. Cross-origin dat...

PT-2026-66229

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.72 Description Insufficient policy enforcement in the Near Field Communication NFC implementation allows a remote attacker to leak cross-origin data through a crafted HTML page. Cross-origi...

PT-2026-66152

Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

PT-2026-66224

Inappropriate implementation in SurfaceCapture in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

PT-2026-66261

Side-channel information leakage in SVG in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

PT-2026-66268

Uninitialized Use in GPU in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

PT-2026-66273

Policy bypass in MHTML in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted MHTML page. Chromium security severity: Low...

PT-2026-66323

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description Insufficient policy enforcement in the Speech component allows a remote attacker who has compromised the renderer process to leak cross-origin data through a crafted HTML page...

CVE-2026-17927: Origin Validation Error

Insufficient policy enforcement in DevTools in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. Chromium security severity: Low...

PT-2026-65983

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description Insufficient validation of untrusted input in the Loader component allows a remote attacker who has already compromised the renderer process to leak cross-origin data through a speciall...

PT-2026-66009

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.72 Description Insufficient validation of untrusted input in the PDF component allows a local attacker to leak cross-origin data through a crafted HTML page. Cross-origin data leakage occur...

PT-2026-65981

Insufficient policy enforcement in Prefetch in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

PT-2026-66107

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An inappropriate implementation in Blink, the browser engine used by Google Chrome, allows a remote attacker to leak cross-origin data through the use of a crafted HTML page. Cross-orig...

PT-2026-66117

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An inappropriate implementation in the Cast component allows a remote attacker to leak cross-origin data, which is data from a different origin than the one serving the page, by using a...