PT-2026-81731

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Missing authorization in DevTools allows a remote attacker to obtain sensitive information through UI Interaction by leveraging social engineering. Recommendations Update Google Chrome ...

PT-2026-81771

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the USB component allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering to entice a user to visit a...

PT-2026-81783

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An integer overflow exists in Chromium, which allows a remote attacker to read memory within the sandbox by using a specially crafted file. Recommendations Update Google Chrome to versi...

PT-2026-81789

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An uninitialized resource in ANGLE allows a remote attacker who has compromised the renderer process to read memory outside the sandbox by using a crafted HTML page. Recommendations...

PT-2026-81817

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use after free issue in Views allows a remote attacker to execute arbitrary code outside the sandbox by inducing the user to visit a crafted HTML page. Use after free is a memory...

PT-2026-81835

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper privilege management in the FileSystem component allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering to entice a us...

PT-2026-81843

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper control of a resource through its lifetime in Workers allows a remote attacker who has compromised the renderer process to bypass site isolation using a crafted HTML page. Site...

PT-2026-81716

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in Extensions allows a remote attacker to bypass system access restrictions through the use of a crafted Chrome extension, typically leveraging social engineerin...

PT-2026-81803

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the ReadingList component allows a remote attacker who has already compromised the renderer process to bypass the web origin policy. This is achieved by usi...

PT-2026-81837

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A UI misrepresentation in Geometry allows a remote attacker to spoof UI elements by using a crafted HTML page. Recommendations Update to version 152.0.7977.65 or later...

PT-2026-81748

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An out-of-bounds write in ANGLE allows a remote attacker to potentially execute arbitrary code outside the sandbox when a user opens a crafted HTML page. ANGLE Almost Native Graphics...

PT-2026-81806

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An information leak exists in the DataTransfer component, which allows a remote attacker to obtain sensitive information by inducing a user to visit a crafted HTML page. Recommendations...

PT-2026-81824

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An incorrect reference resolution in the Preload mechanism allows a remote attacker to bypass the web origin policy, which is a security measure that restricts how a document or script...

PT-2026-81733

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description UI misrepresentation in WebAppInstalls allows a remote attacker to spoof UI elements through the use of a crafted HTML page. Recommendations Update Google Chrome to version 152.0.7977.6...

PT-2026-81759

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the Network component allows a remote attacker to bypass system access restrictions by using a crafted HTML page. Recommendations Update Google Chrome to...

PT-2026-81763

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in DevTools allows a remote attacker who has compromised the renderer process to bypass site isolation through the use of a crafted HTML page. Site isolation i...

PT-2026-81810

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A UI misrepresentation in the navigation component allows a remote attacker to spoof the address bar by using a crafted HTML page. Recommendations Update to version 152.0.7977.65 or lat...

PT-2026-81818

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in WebXR allows a remote attacker to obtain cross-origin data through the use of a crafted HTML page and social engineering. WebXR is an API that enables the...

PT-2026-81819

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Safebrowsing component allows a remote attacker to bypass system access restrictions by using a crafted file. Recommendations Update Google Chrome to...

PT-2026-81545

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A race condition in the Enterprise component on Windows allows an adjacent attacker to potentially execute arbitrary code outside the sandbox by using crafted network traffic. A race...