PT-2026-66088

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description Insufficient validation of untrusted input in Cast allows a remote attacker to leak cross-origin data through a crafted HTML page. Cross-origin data leakage occurs when a website access...

PT-2026-66092

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description Insufficient validation of untrusted input in Cast allows a remote attacker to leak cross-origin data through a crafted HTML page. Cross-origin data leakage occurs when a website access...

PT-2026-66094

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An inappropriate implementation in the 'PresentationAPI' allows a remote attacker to leak cross-origin data through the use of a crafted HTML page. Cross-origin data leakage occurs when...

PT-2026-66096

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An inappropriate implementation in the Autofill feature allows a remote attacker to leak cross-origin data, which is information from a different origin than the one serving the page, b...

PT-2026-66100

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An inappropriate implementation in Extensions allows an attacker to leak cross-origin data. This occurs if a user is convinced to install a malicious extension, which can then be used t...

PT-2026-66102

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An inappropriate implementation in the Loader allows a remote attacker to leak cross-origin data through the use of a crafted HTML page. Cross-origin data leakage occurs when a website...

PT-2026-66107

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An inappropriate implementation in Blink, the browser engine used by Google Chrome, allows a remote attacker to leak cross-origin data through the use of a crafted HTML page. Cross-orig...

PT-2026-66114

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An inappropriate implementation in the GetUserMedia function allows a remote attacker who has compromised the renderer process to leak cross-origin data through a crafted HTML page...

PT-2026-66117

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An inappropriate implementation in the Cast component allows a remote attacker to leak cross-origin data, which is data from a different origin than the one serving the page, by using a...

PT-2026-66121

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.72 Description A side-channel information leakage issue in the GPU allows a remote attacker to leak cross-origin data by using a crafted HTML page. Side-channel attacks involve extracting...

PT-2026-66127

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.72 Description An uninitialized use in WebGL allows a remote attacker to leak cross-origin data through a crafted HTML page. WebGL is a JavaScript API for rendering high-performance...

PT-2026-66134

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description Insufficient policy enforcement in GuestView allows a remote attacker to leak cross-origin data through the use of a crafted HTML page. Cross-origin data leakage occurs when a malicious...

PT-2026-66195

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An inappropriate implementation in the Payments component allows a remote attacker to leak cross-origin data, which is information from a different origin than the one serving the page,...

PT-2026-66223

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.72 Description Insufficient policy enforcement in the Near Field Communication NFC component allows a remote attacker to leak cross-origin data through a crafted HTML page. Cross-origin dat...

PT-2026-66229

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.72 Description Insufficient policy enforcement in the Near Field Communication NFC implementation allows a remote attacker to leak cross-origin data through a crafted HTML page. Cross-origi...

PT-2026-66296

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description A policy bypass in the CSS component allows a remote attacker to leak cross-origin data, which is information from a different origin than the one serving the page, by using a crafted...

PT-2026-66300

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An inappropriate implementation in Blink, the browser engine used by Google Chrome, allows a remote attacker to leak cross-origin data through the use of a crafted HTML page. Cross-orig...

PT-2026-66316

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An inappropriate implementation in the Passwords component allows a remote attacker who has compromised the renderer process to leak cross-origin data through a crafted HTML page...

PT-2026-66319

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.72 Description Insufficient policy enforcement in the USB implementation allows a remote attacker who has compromised the renderer process to leak cross-origin data through a crafted HTML...

PT-2026-66323

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description Insufficient policy enforcement in the Speech component allows a remote attacker who has compromised the renderer process to leak cross-origin data through a crafted HTML page...