PT-2026-81591

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An incorrect reference resolution in the FileSystem component allows a remote attacker to potentially execute arbitrary code outside the sandbox. This is achieved by leveraging social...

PT-2026-81830

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An information leak in the Document Object Model DOM allows a remote attacker to obtain sensitive information. This is achieved by leveraging social engineering to entice a user to visi...

PT-2026-81697

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description A race condition in WebAppInstalls allows a remote attacker to bypass the web origin policy through a co-installed application. This exploitation requires the use of social...

PT-2026-81785

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description Incorrect authorization in the browser allows a remote attacker to bypass system access restrictions via UI Interaction by leveraging social engineering. Recommendations Upda...

PT-2026-81641

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use after free issue exists in Views, which allows a remote attacker to execute arbitrary code outside the sandbox by leveraging social engineering and a crafted HTML page. Use after...

PT-2026-81649

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description An information leak exists in the Sharing component that allows a local attacker to obtain sensitive information via a co-installed app by leveraging social engineering...

PT-2026-81555

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the editing component allows a remote attacker to bypass the web origin policy. This occurs when an attacker compromises the renderer process and uses socia...

PT-2026-81818

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in WebXR allows a remote attacker to obtain cross-origin data through the use of a crafted HTML page and social engineering. WebXR is an API that enables the...

PT-2026-81677

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description A race condition in the Transactions Platform allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering to entice a use...

PT-2026-81541

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the USB component allows a remote attacker to potentially execute arbitrary code outside the sandbox. This occurs if the attacker has already compromised the...

PT-2026-81529

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the Downloads component allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering to entice a user to...

PT-2026-81716

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in Extensions allows a remote attacker to bypass system access restrictions through the use of a crafted Chrome extension, typically leveraging social engineerin...

PT-2026-81766

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An out-of-bounds read exists in the FileSystem component. A remote attacker can use social engineering to lure a user to a crafted HTML page, enabling the reading of memory outside the...

CVE-2026-78909: Use After Free

Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

PT-2026-81620

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description UI misrepresentation in the Transactions Platform allows a remote attacker to potentially spoof UI elements via a crafted HTML page by leveraging social engineering. Recommendations...

CVE-2026-79225: Incorrect Authorization

Incorrect authorization in Browser in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via UI Interaction. Chromium security severity: Low...

PT-2026-81771

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the USB component allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering to entice a user to visit a...

PT-2026-81573

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An uninitialized resource in WebXR allows a remote attacker to potentially leak cross-origin data through a crafted HTML page, provided the attacker can leverage social engineering to...

PT-2026-81669

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use after free issue exists in the FedCM Federated Credential Management component. A remote attacker can leverage social engineering to execute arbitrary code outside the sandbox by...

PT-2026-81624

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use after free issue exists in Extensions that allows a remote attacker to potentially execute arbitrary code outside the sandbox. This is achieved by leveraging social engineering to...