PT-2026-81792

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use after free issue in Aura allows a remote attacker to potentially execute arbitrary code outside the sandbox by inducing the user to visit a crafted HTML page. Use after free is a...

PT-2026-81795

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use after free issue exists in WebGL, where a remote attacker can execute arbitrary code outside the sandbox by inducing the user to visit a specially crafted HTML page. Use after fre...

PT-2026-81805

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use after free issue exists in the UI. This allows a local attacker who has compromised the renderer process to execute arbitrary code outside the sandbox via a local program. Use aft...

PT-2026-81812

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An information leak exists in the ServiceWorker, which allows a remote attacker to obtain cross-origin data by using a crafted HTML page. ServiceWorker is a script that the browser runs...

PT-2026-81841

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An observable discrepancy in Forms allows a remote attacker to obtain sensitive information through the use of a crafted HTML page. Recommendations Update Google Chrome to version...

PT-2026-81842

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description Improper input validation in the Autofill feature allows a remote attacker to obtain sensitive information by using a crafted HTML page. Recommendations Update Google Chrome ...

PT-2026-81780

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An information leak exists in the Network component. A remote attacker who has already compromised the renderer process can obtain sensitive information by using a crafted HTML page...

PT-2026-81845

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An information leak exists in the CSS component that allows a remote attacker to obtain sensitive information by inducing a user to visit a crafted HTML page. Recommendations Update...

PT-2026-81654

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the StorageAccessAPI allows a remote attacker who has compromised the renderer process to bypass the web origin policy through a crafted HTML page. The web...

PT-2026-81711

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An out-of-bounds write in ANGLE allows a remote attacker to execute arbitrary code outside the sandbox by using a crafted HTML page. ANGLE Almost Native Graphics Layer Engine is a...

PT-2026-81752

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in Variations allows a remote attacker to potentially bypass the web origin policy through crafted network traffic. The web origin policy is a security mechani...

PT-2026-81595

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use-after-free issue exists in the Compositing component. This occurs when memory is accessed after it has been freed, which can be triggered by a remote attacker using a specially...

PT-2026-81604

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A protection mechanism failure in HttpsUpgrades allows a remote attacker to bypass the web origin policy through the use of crafted network traffic. The web origin policy is a security...

PT-2026-81662

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A race condition in the GPU allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox. This is achieved by using a...

PT-2026-81776

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A buffer overflow exists in Blink, the rendering engine used by the browser. A remote attacker who has already compromised the renderer process can execute arbitrary code within the...

PT-2026-81729

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Safebrowsing component allows a remote attacker to bypass system access restrictions by using a crafted file. Recommendations Update Google Chrome to...

PT-2026-81745

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An information leak in the Document Object Model DOM allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or script load...

PT-2026-81581

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description UI misrepresentation in Linux Toolkit Theming allows a remote attacker using social engineering to bypass system access restrictions through a crafted HTML page. Recommendations Update...

PT-2026-81672

Name of the Vulnerable Software and Affected Versions Google Chrome on Windows versions prior to 152.0.7977.65 Description Inadequate encryption strength in Notifications allows a remote attacker to bypass the web origin policy through the use of a crafted HTML page, typically leveraging social...

PT-2026-81527

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An information leak exists in the StorageAccessAPI, which allows a remote attacker to obtain cross-origin data by using a crafted HTML page. Recommendations Update Google Chrome to...