PT-2026-81677

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description A race condition in the Transactions Platform allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering to entice a use...

PT-2026-81731

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Missing authorization in DevTools allows a remote attacker to obtain sensitive information through UI Interaction by leveraging social engineering. Recommendations Update Google Chrome ...

PT-2026-81736

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description UI misrepresentation in Extensions allows a remote attacker using social engineering to obtain sensitive information through a crafted Chrome extension. Recommendations Update Google...

PT-2026-81766

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An out-of-bounds read exists in the FileSystem component. A remote attacker can use social engineering to lure a user to a crafted HTML page, enabling the reading of memory outside the...

PT-2026-81771

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the USB component allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering to entice a user to visit a...

PT-2026-81825

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incomplete cleanup in the GetUserMedia function allows a remote attacker to obtain sensitive information. This requires the attacker to have already compromised the renderer process and...

PT-2026-81689

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the input component allows a remote attacker to bypass the web origin policy. This occurs when an attacker has already compromised the renderer process and...

Dotnetnuke < 10.3.3 Unauthorized comments on private journal posts (GHSA-86mr-4mmw-j9g2)

According to its self-reported version, the instance of Dotnetnuke running on the remote web server is prior to 10.3.3. It is, therefore, affected by a vulnerability. - An authorization vulnerability in the Journal module could allow an authenticated user to add comments to private journal posts...

CVE-2026-79084: Inadequate Encryption Strength

Inadequate encryption strength in Notifications in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79098: User Interface (UI) Misrepresentation of Critical Information

UI misrepresentation in PermissionElement in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79271: Exposure of Sensitive Information to an Unauthorized Actor

Information leak in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79253: Improper Input Validation

Improper input validation in Network in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79211: Incorrect Authorization

Incorrect authorization in USB in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79225: Incorrect Authorization

Incorrect authorization in Browser in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via UI Interaction. Chromium security severity: Low...

CVE-2026-78985: Use of Incorrectly-Resolved Name or Reference

Incorrect reference resolution in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78980: Improper Input Validation

Improper input validation in ReaderMode in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Low...

CVE-2026-78974: User Interface (UI) Misrepresentation of Critical Information

UI misrepresentation in Linux Toolkit Theming in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-78960: Exposure of Sensitive Information to an Unauthorized Actor

Information leak in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-78959: Improper Handling of Case Sensitivity

Improper handling of case sensitivity in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78947: Incomplete Cleanup

Incomplete cleanup in Chromium in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Low...