387967 matches found
PT-2026-107008
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An observable discrepancy in the Paint process allows a remote attacker to leak cross-origin data, which is information from a different origin than the one serving the page, by using a...
PT-2026-107011
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A use of released resource in Core allows a remote attacker who has compromised the renderer process to potentially obtain cross-origin data through a crafted HTML page. A use of releas...
PT-2026-107032
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An information leak exists in the Payments component that allows a remote attacker to obtain cross-origin data by using a crafted HTML page. Cross-origin data refers to information...
PT-2026-107051
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An uninitialized resource in Skia, a graphics library, allows a remote attacker to obtain cross-origin data by inducing a user to visit a crafted HTML page. Recommendations Update Googl...
CVE-2026-106253: Incorrect Authorization
Incorrect authorization in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Medium...
PT-2026-106885
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An observable discrepancy in the Scroll feature allows a remote attacker to obtain cross-origin data, which is information from a different origin than the one serving the current page,...
PT-2026-106897
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Missing authorization in Google Lens allows a remote attacker who has compromised the renderer process to obtain cross-origin data through a crafted HTML page. Cross-origin data refers ...
PT-2026-106926
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incorrect authorization in Extensions allows a remote attacker to obtain cross-origin data through the use of a crafted Chrome extension. Cross-origin data refers to information belongi...
PT-2026-106859
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An uninitialized resource in the Media component allows a remote attacker to obtain cross-origin data, which is data from a different origin than the one serving the page, by using a...
PT-2026-106933
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incorrect authorization in DevTools allows a remote attacker to leak cross-origin data through the use of a crafted HTML page and social engineering. Recommendations Update Google Chrom...
PT-2026-107004
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An integer overflow occurs in the Compositing component, which allows a remote attacker to obtain cross-origin data by inducing the user to visit a crafted HTML page. Recommendations...
PT-2026-107064
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An information leak exists in the WebAudio component. A remote attacker can potentially leak cross-origin data, which refers to data belonging to a different origin domain, protocol, or...
PT-2026-107070
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incorrect authorization in the Media component allows a remote attacker to leak cross-origin data, which is information from a different origin than the one serving the page, by using a...
PT-2026-107066
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incomplete cleanup in Glic allows a remote attacker to leak cross-origin data through the use of a crafted HTML page and social engineering. Recommendations Update Google Chrome to...
CVE-2026-106184: Use of Uninitialized Resource
Uninitialized resource in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...
CVE-2026-106224: Missing Authorization
Missing authorization in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106245: Use of Uninitialized Resource
Uninitialized resource in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...
CVE-2026-106260: Incorrect Authorization
Incorrect authorization in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
PT-2026-106840
Name of the Vulnerable Software and Affected Versions LangChain versions prior to 1.3.1 Description In the MongoDBChatMessageHistory component, the system fails to enforce the required string type for untrusted structured session identifiers at runtime. This allows a session identifier to be...